---
title: "DPDP Act Compliance for Kerala SMEs · Adv. K J Muhammed Aslam"
description: "Explains DPDP duties for Kerala SMEs — applicability, consent, breach reporting, grievance redress and TDSAT appeals. Information only."
url: "https://advaslam.com/practice/data-protection/matters/"
image: "https://advaslam.com/og.png"
---

DPDP compliance

# DPDP Act 2023 — Kerala Business Readiness

A working index of the Digital Personal Data Protection Act 2023 and the DPDP Rules 2025 for Kerala businesses — applicability and roles, notices and consent, children’s data, breach response and the 72-hour clock, retention and security safeguards, vendor and processor terms, rights requests, the Board and TDSAT route, e-sign and domain questions, and AI-governance readiness. Rule numbers and statutory dates carry a verify note; confirm the Gazette position before acting. General information only.

90 matters in 5 groups · [Data protection & DPDP compliance →](https://advaslam.com/practice/data-protection/)

## [Applicability, data fiduciaries, notices and consent](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/)

18 matters

1.  [DPDP applicability audit for Kerala business — do we fall under the Act](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#dpdp-applicability-audit-for-kerala-business-do-we-fall-under-the-act)
2.  [Digitised offline data — registers, forms and CCTV logs brought online](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#digitised-offline-data-registers-forms-and-cctv-logs-brought-online)
3.  [Foreign website or app serving Kerala customers — extraterritorial reach](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#foreign-website-or-app-serving-kerala-customers-extraterritorial-reach)
4.  [Personal or domestic use exclusion — family, household handling](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#personal-or-domestic-use-exclusion-family-household-handling)
5.  [Publicly available data — blogs, self-published posts and statutory disclosures](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#publicly-available-data-blogs-self-published-posts-and-statutory-disclosures)
6.  [Fiduciary vs Processor — who is answerable when a vendor handles data](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#fiduciary-vs-processor-who-is-answerable-when-a-vendor-handles-data)
7.  [Joint fiduciaries — marketplace, franchise and hospital-lab models](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#joint-fiduciaries-marketplace-franchise-and-hospital-lab-models)
8.  [Section 17(1)(a) — processing to enforce a legal right or claim](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#section-171a-processing-to-enforce-a-legal-right-or-claim)
9.  [Section 5 notice drafting — Malayalam + English, item by item](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#section-5-notice-drafting-malayalam-english-item-by-item)
10.  [Legacy data transition — s.5(2) notice for pre-Act consent](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#legacy-data-transition-s52-notice-for-pre-act-consent)
11.  [Consent-flow design — free, specific, informed, unconditional, unambiguous](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#consent-flow-design-free-specific-informed-unconditional-unambiguous)
12.  [Consent Manager — single-point consent dashboard](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#consent-manager-single-point-consent-dashboard)
13.  [Withdrawal — as easy to leave as to join, and what survives it](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#withdrawal-as-easy-to-leave-as-to-join-and-what-survives-it)
14.  [Proving notice + consent — s.6(10) burden on the fiduciary](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#proving-notice-consent-s610-burden-on-the-fiduciary)
15.  [Voluntary data (s.7(a)) and employment (s.7(i)) — consent-free but bounded](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#voluntary-data-s7a-and-employment-s7i-consent-free-but-bounded)
16.  [State, medical-emergency and disaster uses — s.7(b)–(h) map](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#state-medical-emergency-and-disaster-uses-s7bh-map)
17.  [Startup and notified-class relaxation — s.17(3) tracker](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#startup-and-notified-class-relaxation-s173-tracker)
18.  [Lawful purpose and purpose limitation — s.4 anchor memo](https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/#lawful-purpose-and-purpose-limitation-s4-anchor-memo)

## [Rights, children, employees, CCTV and retention](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/)

18 matters

1.  [DSAR — right to access summary, sharing trail and processing note (s.11)](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#dsar-right-to-access-summary-sharing-trail-and-processing-note-s11)
2.  [Correction cascade — wrong phone, address or name across systems and vendors](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#correction-cascade-wrong-phone-address-or-name-across-systems-and-vendors)
3.  [Erasure — delete me, unless purpose survives or law says keep](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#erasure-delete-me-unless-purpose-survives-or-law-says-keep)
4.  [Nomination — s.14 nominee for death or incapacity](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#nomination-s14-nominee-for-death-or-incapacity)
5.  [Section 15 defence — answering false, frivolous or impersonated requests](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#section-15-defence-answering-false-frivolous-or-impersonated-requests)
6.  [Age-gating — verifiable parental consent before touching a child's data](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#age-gating-verifiable-parental-consent-before-touching-a-childs-data)
7.  [No tracking, monitoring or targeted ads at children — s.9(3) hard line](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#no-tracking-monitoring-or-targeted-ads-at-children-s93-hard-line)
8.  [Notified child-processing classes and verifiably-safe exemption — s.9(4)/(5) watch](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#notified-child-processing-classes-and-verifiably-safe-exemption-s945-watch)
9.  [School-vendor pack — student app, bus GPS and fee-portal checklist](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#school-vendor-pack-student-app-bus-gps-and-fee-portal-checklist)
10.  [HR pack — attendance, payroll and performance data under s.7(i)](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#hr-pack-attendance-payroll-and-performance-data-under-s7i)
11.  [Ex-employee data — references, dues and deletion after exit](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#ex-employee-data-references-dues-and-deletion-after-exit)
12.  [CCTV SOP — shop, clinic and apartment cameras with people data](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#cctv-sop-shop-clinic-and-apartment-cameras-with-people-data)
13.  [Facial recognition on private premises — high-risk memo, default no](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#facial-recognition-on-private-premises-high-risk-memo-default-no)
14.  [Retention schedules — purpose-over means delete, unless law says keep](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#retention-schedules-purpose-over-means-delete-unless-law-says-keep)
15.  [PMLA/banking 10-year override — when another law beats erasure](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#pmlabanking-10-year-override-when-another-law-beats-erasure)
16.  [Hospital retention — treatment records vs delete-me requests](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#hospital-retention-treatment-records-vs-delete-me-requests)
17.  [Grievance-first rule — Board will not hear you before the fiduciary does](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#grievance-first-rule-board-will-not-hear-you-before-the-fiduciary-does)
18.  [Data Principal duties + Rs.10,000 track — the quiet penalty on individuals](https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/#data-principal-duties-rs10000-track-the-quiet-penalty-on-individuals)

## [Vendors, security, breach and grievances](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/)

18 matters

1.  [DPA drafting — s.8(2) valid-contract clauses Kerala vendors will sign](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#dpa-drafting-s82-valid-contract-clauses-kerala-vendors-will-sign)
2.  [Tiering — processor, sub-processor or second fiduciary](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#tiering-processor-sub-processor-or-second-fiduciary)
3.  [Cross-border transfer — s.16 blacklist model and what to write in the DPA](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#cross-border-transfer-s16-blacklist-model-and-what-to-write-in-the-dpa)
4.  [Breach indemnity — who pays when the processor leaks](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#breach-indemnity-who-pays-when-the-processor-leaks)
5.  [Reasonable safeguards checklist — s.8(5) without inventing mandates](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#reasonable-safeguards-checklist-s85-without-inventing-mandates)
6.  [ISO 27001 mapping — using audit language without overclaiming](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#iso-27001-mapping-using-audit-language-without-overclaiming)
7.  [Ransomware — when encryption of your own data is a personal data breach](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#ransomware-when-encryption-of-your-own-data-is-a-personal-data-breach)
8.  [72-hour + without-delay notices — Board and each affected principal](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#72-hour-without-delay-notices-board-and-each-affected-principal)
9.  [Breach playbook — contain, assess, notify, submit, document, mitigate](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#breach-playbook-contain-assess-notify-submit-document-mitigate)
10.  [Late notice — delay condonation and mitigation story](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#late-notice-delay-condonation-and-mitigation-story)
11.  [Victim push — breach victim's complaint to the Board](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#victim-push-breach-victims-complaint-to-the-board)
12.  [Grievance mechanism + officer — s.8(10)/s.13 front door that must work](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#grievance-mechanism-officer-s810s13-front-door-that-must-work)
13.  [Grievance SLA — counting the response window without guessing](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#grievance-sla-counting-the-response-window-without-guessing)
14.  [Consent Manager grievance — when the dashboard itself fails](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#consent-manager-grievance-when-the-dashboard-itself-fails)
15.  [Law-enforcement sharing shield — s.11(2) replies without tipping off](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#law-enforcement-sharing-shield-s112-replies-without-tipping-off)
16.  [Accuracy duty — s.8(3) where data decides loans, jobs or admissions](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#accuracy-duty-s83-where-data-decides-loans-jobs-or-admissions)
17.  [Publish the contact — s.8(9) DPO or answerable person on the website](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#publish-the-contact-s89-dpo-or-answerable-person-on-the-website)
18.  [Processor erasure cascade — stopping the copies after stop](https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/#processor-erasure-cascade-stopping-the-copies-after-stop)

## [Significant data fiduciaries, the Board, TDSAT, e-sign and domains](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/)

18 matters

1.  [SDF readiness — will the Government notify us as Significant](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#sdf-readiness-will-the-government-notify-us-as-significant)
2.  [DPO appointment — India-based, Board-facing, grievance-owning](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#dpo-appointment-india-based-board-facing-grievance-owning)
3.  [DPIA drafting — description, risk, management for SDF processing](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#dpia-drafting-description-risk-management-for-sdf-processing)
4.  [Independent data audit — auditor who evaluates SDF compliance](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#independent-data-audit-auditor-who-evaluates-sdf-compliance)
5.  [Gap-audit, ROPA, consent vault and training — the four-file SDF starter](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#gap-audit-ropa-consent-vault-and-training-the-four-file-sdf-starter)
6.  [Board complaint drafting — s.27(1)(b) after grievance exhaust](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#board-complaint-drafting-s271b-after-grievance-exhaust)
7.  [Voluntary undertaking — s.32 corporate-probation strategy](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#voluntary-undertaking-s32-corporate-probation-strategy)
8.  [How the Board starts — breach intimation, reference, court direction, suo-motu screen](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#how-the-board-starts-breach-intimation-reference-court-direction-suo-motu-screen)
9.  [Mitigation for quantum — s.33(2) seven-factor story](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#mitigation-for-quantum-s332-seven-factor-story)
10.  [TDSAT appeal — 60 days, sufficient cause, 6-month endeavour](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#tdsat-appeal-60-days-sufficient-cause-6-month-endeavour)
11.  [Mediation — s.31 Board-directed settlement track](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#mediation-s31-board-directed-settlement-track)
12.  [E-sign harmonisation — consent records that survive evidence scrutiny](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#e-sign-harmonisation-consent-records-that-survive-evidence-scrutiny)
13.  [INDRP + WHOIS — phishing domain using your brand to harvest data](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#indrp-whois-phishing-domain-using-your-brand-to-harvest-data)
14.  [Phishing + blocking — s.37 DPDP vs s.69A IT Act takedown routes](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#phishing-blocking-s37-dpdp-vs-s69a-it-act-takedown-routes)
15.  [Intermediary clock — reports, acknowledgement and GAC/69A overlay](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#intermediary-clock-reports-acknowledgement-and-gac69a-overlay)
16.  [E-commerce seller + platform — who owns the customer-data breach](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#e-commerce-seller-platform-who-owns-the-customer-data-breach)
17.  [Dark patterns vs DPDP consent — when UI itself voids consent](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#dark-patterns-vs-dpdp-consent-when-ui-itself-voids-consent)
18.  [Section 37 blocking deep-dive — the 2-penalty gate most blogs skip](https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/#section-37-blocking-deep-dive-the-2-penalty-gate-most-blogs-skip)

## [AI governance and compliance](https://advaslam.com/practice/data-protection/matters/ai-governance/)

18 matters

1.  [AI use policy for the office — which tools, which data, who approves](https://advaslam.com/practice/data-protection/matters/ai-governance/#office-ai-use-policy-which-tools-which-data-who-approves)
2.  [Hallucination SOP — AI output never goes to court or client unverified](https://advaslam.com/practice/data-protection/matters/ai-governance/#hallucination-sop-ai-output-never-goes-to-court-or-client-unverified)
3.  [Hiring-AI review — DPIA-style check before CV screening tools decide](https://advaslam.com/practice/data-protection/matters/ai-governance/#hiring-ai-review-dpia-style-check-before-cv-screening-tools-decide)
4.  [Shadow IT — personal Gmail, free bots and USB models with customer data](https://advaslam.com/practice/data-protection/matters/ai-governance/#shadow-it-personal-gmail-free-bots-and-usb-models-with-customer-data)
5.  [AI vendor contracts — no-train clause for AI SaaS handling your data](https://advaslam.com/practice/data-protection/matters/ai-governance/#vendor-no-train-clause-stopping-ai-saas-from-learning-on-your-data)
6.  [AI procurement checklist — DPDP + security before purchase](https://advaslam.com/practice/data-protection/matters/ai-governance/#ai-procurement-checklist-dpdp-security-before-purchase)
7.  [Prompts and recordings stored — AI retention breach hiding in chat history](https://advaslam.com/practice/data-protection/matters/ai-governance/#prompts-and-recordings-stored-ai-retention-breach-hiding-in-chat-history)
8.  [Employee data for AI training — s.7(i) does not mean free corpus](https://advaslam.com/practice/data-protection/matters/ai-governance/#employee-data-for-ai-training-s7i-does-not-mean-free-corpus)
9.  [Training-data deletion pipeline — honouring s.12/s.8(7) inside ML systems](https://advaslam.com/practice/data-protection/matters/ai-governance/#training-data-deletion-pipeline-honouring-s12s87-inside-ml-systems)
10.  [Scraped-data licensing — copyright + DPDP lawful purpose together](https://advaslam.com/practice/data-protection/matters/ai-governance/#scraped-data-licensing-copyright-dpdp-lawful-purpose-together)
11.  [Deepfake response sprint — first 24 hours for a Kerala victim](https://advaslam.com/practice/data-protection/matters/ai-governance/#deepfake-response-sprint-first-24-hours-for-a-kerala-victim)
12.  [Brand deepfake — company director faked for fraud or defamation](https://advaslam.com/practice/data-protection/matters/ai-governance/#brand-deepfake-company-director-faked-for-fraud-or-defamation)
13.  [School deepfake — minor targeted; child-safety overlay](https://advaslam.com/practice/data-protection/matters/ai-governance/#school-deepfake-minor-targeted-child-safety-overlay)
14.  [Telecom UCC — promotional calls/SMS, DLT and consent proof](https://advaslam.com/practice/data-protection/matters/ai-governance/#telecom-ucc-promotional-callssms-dlt-and-consent-proof)
15.  [AI support agents — notice + consent for recorded helpdesk calls/chats](https://advaslam.com/practice/data-protection/matters/ai-governance/#ai-support-agents-notice-consent-for-recorded-helpdesk-callschats)
16.  [Voice-clone consent — using a person's voice in AI content](https://advaslam.com/practice/data-protection/matters/ai-governance/#voice-clone-consent-using-a-persons-voice-in-ai-content)
17.  [Automated decisions — loan, screening or pricing tools and s.8(3) accuracy](https://advaslam.com/practice/data-protection/matters/ai-governance/#automated-decisions-loan-screening-or-pricing-tools-and-s83-accuracy)
18.  [Research datasets — s.17(2)(b) archive/research/statistical path for AI data](https://advaslam.com/practice/data-protection/matters/ai-governance/#research-datasets-s172b-archiveresearchstatistical-path-for-ai-data)

Contact

[WhatsApp](https://wa.me/919497240215?text=Hello%2C%20I%20found%20advaslam.com%20and%20would%20like%20to%20discuss%20a%20matter.) [contact@advaslam.com](mailto:contact@advaslam.com) [+91 94972 40215](tel:+919497240215)

3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction, Ernakulam, Kerala 682031 · Monday – Saturday, 10:00 – 18:30 (by appointment)

```json
{"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://advaslam.com/#website","url":"https://advaslam.com","name":"Adv. K J Muhammed Aslam","alternateName":"advaslam.com","publisher":{"@id":"https://advaslam.com/#person"},"inLanguage":"en-IN"},{"@type":"Person","@id":"https://advaslam.com/#person","name":"K J Muhammed Aslam","alternateName":["Adv. K J Muhammed Aslam","Advocate K J Muhammed Aslam","Muhammed Aslam K J","Adv. Aslam"],"honorificPrefix":"Adv.","jobTitle":"Advocate","description":"Advocate enrolled with the Bar Council of Kerala, practising from High Court Junction, Ernakulam: cyber and technology law, data protection (DPDP), business, banking and IPR, and litigation before the High Court of Kerala and the courts at Ernakulam.","url":"https://advaslam.com/profile/","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"alumniOf":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"memberOf":[{"@type":"Organization","name":"Bar Council of Kerala","url":"https://barcouncilkerala.org/lawyer-registry-list"},{"@type":"Organization","name":"Kerala High Court Advocates' Association","url":"https://khcaa.com/"}],"identifier":[{"@type":"PropertyValue","propertyID":"Bar Council of Kerala Enrolment No.","value":"K/001823/2026"},{"@type":"PropertyValue","propertyID":"KHCAA Membership No.","value":"OAJ 358"}],"knowsAbout":["Information Technology Act 2000","Cyber crime law","Technology law and technology contracts","Digital Personal Data Protection Act 2023","DPDP compliance","Data protection and privacy law","Business and commercial law","Contract drafting and negotiation","Banking and finance law","Negotiable Instruments Act cheque dishonour","SARFAESI Act","Intellectual property law","Copyright and trademark law","Patent infringement","GST and income-tax law","Blockchain and cryptocurrency technology","Web3 wallets and NFTs","Drone regulation and DigitalSky framework","Writ petitions under Article 226","Criminal law","Civil and consumer litigation","Family and succession law","Service and labour law","Legal drafting","Mediation and dispute resolution"],"knowsLanguage":["en","ml"],"workLocation":{"@id":"https://advaslam.com/#practice"},"hasCredential":[{"@type":"EducationalOccupationalCredential","credentialCategory":"Enrolment as an advocate","identifier":"K/001823/2026","recognizedBy":{"@type":"Organization","name":"Bar Council of Kerala"},"description":"Enrolled as an advocate with the Bar Council of Kerala (K/001823/2026), 2026"},{"@type":"EducationalOccupationalCredential","credentialCategory":"degree","educationalLevel":"Bachelor","recognizedBy":{"@type":"CollegeOrUniversity","name":"Bharata Mata School of Legal Studies"},"description":"BBA LLB (Hons.), Bharata Mata School of Legal Studies (2025)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Remote Pilot Certificate","recognizedBy":{"@type":"Organization","name":"Directorate General of Civil Aviation, India"},"description":"DGCA Remote Pilot Certificate, issued 2022"}],"subjectOf":[{"@type":"CreativeWork","name":"Govind Babu v. State of Kerala (Crl.M.C. No. 5640 of 2026, 2026:KER:69496)","url":"https://indiankanoon.org/doc/151180872/","datePublished":"2026-09-10","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Viji Sagar v. State of Kerala (Crl.M.C. No. 1603 of 2026, 2026:KER:20803)","url":"https://indiankanoon.org/doc/193042273/","datePublished":"2026-03-09","publisher":{"@type":"Organization","name":"High Court of Kerala"}},{"@type":"CreativeWork","name":"Anjana v. Manoharan A.P. (C.R.P. No. 442 of 2025, 2026:KER:10054)","url":"https://indiankanoon.org/doc/68585852/","datePublished":"2026-02-05","publisher":{"@type":"Organization","name":"High Court of Kerala"}}],"sameAs":["https://www.linkedin.com/in/azlubro","https://portal.khcaa.com/advocate?id=10480","https://lexosys.com"]},{"@type":"LegalService","@id":"https://advaslam.com/#practice","name":"Adv. K J Muhammed Aslam — Advocate, Ernakulam","url":"https://advaslam.com","image":"https://advaslam.com/og.png","telephone":"+919497240215","email":"contact@advaslam.com","address":{"@type":"PostalAddress","streetAddress":"3rd Floor, Lalan Towers (KGL Builders), Vanchi Square, High Court Junction","addressLocality":"Ernakulam","addressRegion":"Kerala","postalCode":"682031","addressCountry":"IN"},"geo":{"@type":"GeoCoordinates","latitude":9.9889,"longitude":76.2748},"hasMap":"https://www.google.com/maps/search/?api=1&query=Lalan+Towers+High+Court+Junction+Ernakulam","areaServed":[{"@type":"City","name":"Ernakulam"},{"@type":"City","name":"Kochi"},{"@type":"State","name":"Kerala"},{"@type":"Country","name":"India"}],"openingHoursSpecification":{"@type":"OpeningHoursSpecification","dayOfWeek":["Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],"opens":"10:00","closes":"18:30"},"founder":{"@id":"https://advaslam.com/#person"},"knowsAbout":["Cyber crime and IT Act matters","Data protection and DPDP Act compliance","Business, banking, intellectual property and tax","Legal drafting","Criminal law: bail, quash and appeals","Writ petitions before the High Court of Kerala","Civil, property and consumer matters","Family and succession matters","Service and labour matters"]},{"@type":"CollectionPage","name":"DPDP Act 2023 — Kerala Business Readiness","description":"Explains DPDP duties for Kerala SMEs — applicability, consent, breach reporting, grievance redress and TDSAT appeals. Information only.","url":"https://advaslam.com/practice/data-protection/matters/","inLanguage":"en-IN","isPartOf":{"@id":"https://advaslam.com/#website"},"author":{"@id":"https://advaslam.com/#person"},"mainEntity":{"@type":"ItemList","numberOfItems":5,"itemListElement":[{"@type":"ListItem","position":1,"name":"Applicability, data fiduciaries, notices and consent","url":"https://advaslam.com/practice/data-protection/matters/applicability-fiduciary-notices-consent/"},{"@type":"ListItem","position":2,"name":"Rights, children, employees, CCTV and retention","url":"https://advaslam.com/practice/data-protection/matters/rights-children-employee-cctv-retention/"},{"@type":"ListItem","position":3,"name":"Vendors, security, breach and grievances","url":"https://advaslam.com/practice/data-protection/matters/vendor-security-breach-grievance/"},{"@type":"ListItem","position":4,"name":"Significant data fiduciaries, the Board, TDSAT, e-sign and domains","url":"https://advaslam.com/practice/data-protection/matters/sdf-board-tdsat-esign-domain/"},{"@type":"ListItem","position":5,"name":"AI governance and compliance","url":"https://advaslam.com/practice/data-protection/matters/ai-governance/"}]}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://advaslam.com/"},{"@type":"ListItem","position":2,"name":"Practice","item":"https://advaslam.com/practice/"},{"@type":"ListItem","position":3,"name":"Data protection & DPDP compliance","item":"https://advaslam.com/practice/data-protection/"},{"@type":"ListItem","position":4,"name":"Matters","item":"https://advaslam.com/practice/data-protection/matters/"}]}]}
```