PrivacyLawHub
PrivacyLawHub is a free, open platform for Privacy, Data Protection and AI Regulations. It is among the first to bring together, in one place, global privacy laws from across the world alongside the GDPR and India's DPDP Act as annotated bare Acts with commentary, together with Regulator Guidance, Policy Drafts, Compliance Materials, Certification Mock Exams and Privacy GPT, for everyone researching, studying or working in the field.
Everything a privacy team actually opens on a Tuesday morning.
Policy drafts you can adapt
Practitioner-grade templates for DPDP, GDPR DPAs, AI usage and more, ready to take to a client.
A working privacy knowledge base
GDPR, DPDP Act, EDPB guidance, PDPL, annotated reading copies, plain-English summaries.
Free CIPP/E, CIPM and AIGP prep
Mock tests and study materials so you can certify without paying for prep courses.
Privacy Template Guide
Website Privacy Policy under the DPDP Act
Drafting guide and model website privacy policy developed from a line-by-line review of a connected-device app policy. Explains the data mapping and client fact-finding needed before drafting, the distinction between a public policy and a standalone consent notice, and how to describe actual processing, sharing, AI features, retention and Indian rights. The model contains placeholders that must be completed and checked against live practices before publication.
Terms of Service for Users in India
Drafting guide and model terms for digital services offered to consumers in India, including connected-device apps, paid features, subscriptions and AI tools. Covers affirmative contract acceptance, separate privacy and payment choices, mandatory consumer protections, cancellations, refunds, unfair terms, intellectual property and grievances. Includes a client questionnaire and model clauses to adapt to confirmed practices; distinguishes future-effective e-commerce amendments from existing duties and is the companion to the Website Privacy Policy guide.
Marketing Head Privacy Role SOP
Drafting guide and model role SOP for the Head of Marketing, where the consent model bites hardest: basis for each activity, notices and collection points, consent design, proof of consent, withdrawal and suppression, and acquired or public data.
Latest from the desk
- DPDP Act
Data Retention - Statutory Retention Schedule
Under the DPDPA, deletion is the default. But record-keeping laws require many business records to be kept for years. Keep each record for the longest period that applies, and only then erase.
- DPDP & GDPR
Does Processing Personal Data Through A Foreign Data Centre Constitute A Cross-Border Transfer Under The DPDP Act And The GDPR?
For ex- An Indian company uploads encrypted employee records to a foreign cloud server.
- AI & Privacy
Understanding The Supreme Court Of India’s Draft Regulations For The Use Of Artificial Intelligence In Courts, 2026
The Supreme Court of India has released the draft Regulations for Use of Artificial Intelligence (AI) in Courts, 2026 for public consultation, inviting comments and suggestions until 20 June 2026.
Get new templates by email
A short, useful update whenever a new privacy template guide, knowledge-base resource or guide is published. No spam. Unsubscribe anytime.