9 articles tagged
RBI's authentication Directions took effect on 1 April 2026 and card issuers must validate cross-border CNP transactions by 1 October 2026. What the three principles require in code, which exemptions survive, and how
GSTN's advisory of 17 June 2026 put eight new validations into production on 1 August 2026. Error 5002 rejects an IRN with ship-to details and no GSTIN. Here is the field-by-field engineering work.
SEBI's extension collapsed two milestones into one 31 October 2026 date: audit and remediation, both. What the circulars actually require, and the WCAG criteria that fail on trading platforms.
India notified the DPDP Rules in November 2025, with core obligations 18 months out and penalties up to ₹250 crore. The data-residency and multi-region cloud architecture Indian teams should build now.
The Reserve Bank of India (Digital Lending) Directions, 2025 are not a policy document you hand to legal. They specify what your app may read from a phone, where data may sit, and how money must move. Here is the build
Most Indian companies hold years of personal data collected before the DPDP Act. Section 5(2) says you owe those people a notice. Here is how to find that data, send the notice, and erase what you cannot justify.
Article 50 of the EU AI Act applies from 2 August 2026. The Digital Omnibus delayed the high-risk rules to December 2027 but left transparency untouched, and shortened one grace period rather than extending it.
From 2 August 2026 providers must mark generative AI output in a machine-readable format and deployers must label deepfakes. Systems already on the market get until 2 December 2026. What that means in code.
India's DPDP Rules 2025 are notified and the clock is running: consent managers by November 2026, full compliance by mid-May 2027, fines up to Rs 250 crore. The engineering playbook for Indian startups.
