The rules of the Bar Council of India prohibit advocates and law firms from soliciting work or advertising in any manner. By clicking “I agree” below, you acknowledge and confirm that:
(i) you are seeking information about Pavan Duggal Associates of your own accord, and there has been no form of solicitation, advertisement or inducement by the firm or any of its members;
(ii) the content of this website is for informational purposes only and does not constitute legal advice or create an advocate-client relationship; and
(iii) the firm is not liable for any action taken in reliance on the information on this website. Readers should obtain specific legal advice for their circumstances.
A specialised law firm offering advisory, consultancy and litigation services across technology law: cyberlaw, artificial intelligence law, data protection, cybersecurity, e-commerce and emerging technologies.
Practising before the Supreme Court of India
Pavan Duggal Associates is a specialised law firm based in New Delhi, practising before the Supreme Court of India and advising on the legal dimensions of digital technology and emerging technology governance.
The firm brings legal method to the questions technology creates: who is responsible when systems fail, what an organisation must do before a regulator asks, how evidence that exists only in electronic form is preserved and proved, and how contracts should allocate risk when the work is done by software, platforms and, increasingly, autonomous AI agents.
Clients across the public and private sectors, in India and internationally.
Each practice combines advisory work with litigation capability, so that the advice given before a dispute is advice that will hold up in one.
Advisory and litigation on matters arising under the Information Technology Act, 2000 and related legislation.
Legal advisory on AI regulation, accountability and liability, and on compliance with national and international AI governance instruments.
Advisory on compliance with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Legal risk assessment, policy drafting and regulatory advisory for organisations and critical information infrastructure.
Advisory on the legal frameworks for online commerce and the digital economy.
Legal advisory on the newest technology domains, informed by the firm’s published legal scholarship.
Four verticals that follow an organisation’s security programme from first assessment to the day of an incident, so that every technical step has its legal footing.
Authorise, validate and defend technical findings legally.
Legal expertise across 40+ regulatory and compliance frameworks.
Draft, contract and govern integrated security architectures.
Counsel, notify and defend, around the clock, under attorney-client privilege.
Offered with technical partner firms, so that legal and technical work run as a single engagement.
One engagement. Two disciplines. Four verticals.The DPDP Rules, 2025 bring the Act into force in three phases over eighteen months. The substantive obligations on Data Fiduciaries, including notice, Data Principal rights, security safeguards and breach notification, apply from 13 May 2027.
The maximum penalty under the Act, for failure to take reasonable security safeguards to prevent a personal data breach.
The Digital Personal Data Protection Act, 2023 receives assent.
DPDP Rules, 2025 notified; Data Protection Board of India established.
Consent Manager provisions come into force.
Substantive obligations and the penalty regime apply.
A time-boxed assessment that maps the organisation’s current state against the Act and the 2025 Rules, and returns a prioritised roadmap in board-ready terms.
Dr. Pavan Duggal founded Pavan Duggal Associates. His practice and scholarship span cyberlaw, cybercrime, cybersecurity law, data protection and artificial intelligence law, and his recent work addresses the accountability and liability of agentic AI systems.
He has served as Cyber Security Consultant to the Bureau of Civil Aviation Security and as Cyberlaw Advisor to the National Investigation Agency. He is the author of 203 books, and has convened the International Conference on Cyberlaw, Cybercrime & Cybersecurity every year since 2014.
Twelve instruments, model laws and working papers by Dr. Pavan Duggal, each deposited on Zenodo with a permanent DOI. They are proposals offered for scrutiny, not law in force.
The 13th International Conference on Cyberlaw, Cybercrime & Cybersecurity, convened by Dr. Pavan Duggal. Day 1, 25 November, is the online Summit on who answers when an AI agent acts.
cyberlawcybersecurity.com
For enquiries on any area of practice, a DPDP gap analysis, or the cyber legal service verticals.