Sharanya is a graduate of Hidayatullah National Law University, Raipur. She is a legal consultant specialising in the intersection of digital rights, data protection, and privacy law.
Her expertise extends beyond these core areas to encompass commercial law and intellectual property, giving her a comprehensive understanding of the legal landscape for businesses in the digital age. She helps businesses navigate global data privacy standards, including GDPR and CCPA.
The Data Protection, Privacy & AI Governance practice is led by a privacy and regulatory lawyer with about a decade's experience advising on data protection across India, the United Kingdom, the European Union and other international markets. Her practice has covered the GDPR, the CCPA and other global privacy regimes alongside Indian law, and has included regulatory research, privacy impact assessments, cross-border transfer analysis, incident response and engagement with supervisory authorities.
She has advised organisations in technology and SaaS, financial services, healthcare, professional services and digital platforms, in both law-firm and in-house settings. Her experience includes establishing a global privacy, compliance and risk programme across more than 30 jurisdictions, acting as Data Protection Officer and regulatory lead for Norway and the UAE, and advising the board and senior management on regulatory and enterprise risk. She has also supported DPO-as-a-Service engagements under appointed Data Protection Officers and led readiness work for SOC 2 Type II and ISO/IEC 27001.
Under her leadership, the practice applies this multi-jurisdictional, cross-sector experience to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. The regime has features of its own, including its consent-centred structure, defined legitimate uses, its treatment of children’s data and its role categories, and our advice treats these on their own terms and not as a variation on the GDPR. Experience of how privacy obligations operate across regulators and sectors informs how we assess applicability, sequence implementation and advise clients whose data, customers and counterparties extend beyond India.
She has worked with companies to provide strategic guidance in contract negotiations, policy development, and comprehensive training programmes, to ensure privacy is integrated into a company's operations. Currently a consultant with Cornerstone Law, Sharanya has worked with Allendevaux & Company LLC, an Ohio-based full-service firm that helps organisations globally with their Cybersecurity, Data Protection, and Compliance requirements.
- Data protection and privacy law: India’s DPDP Act and Rules, the GDPR, the CCPA and other international regimes
- Privacy programme design, governance and implementation
- Fractional DPO and ongoing privacy support
- Data protection impact assessments and privacy risk assessments
- Data processing agreements, vendor privacy and cross-border data transfers
- Incident and breach response
- AI and emerging technology governance
- Sector focus: technology and SaaS, financial services, healthcare, professional services and digital platforms
- Hidayatullah National Law University, Raipur
- Built a global privacy, compliance and risk programme from the ground up across more than 30 countries, covering governance, policies, vendor management and compliance controls.
- Served as Data Protection Officer and regulatory lead for a Norwegian company and its subsidiary in the UAE, including supporting engagement with regulatory authorities.
- Advised the senior leadership, CEO and the Board on regulatory and enterprise risk.
- Led SOC 2 Type II and ISO/IEC 27001 readiness work, coordinating controls, evidence and remediation across security and business teams.
- Advised on privacy terms and data protection agreements for SaaS products including CRM, Books, Mail and Desk, supporting compliance with the GDPR, CCPA and other global requirements.
- Enrolled with the Bar Council of Delhi