Privacy compliance, by regulation and industry
Regulations read differently depending on what you build. These guides break down how each privacy law applies to your industry — and how TruePrivacy operationalises the obligations.
GDPR
GDPR Compliance for Banks and Financial Institutions
Lawful bases, DSARs, and cross-border transfers for regulated finance
GDPR Compliance for Insurance and Insurtech
Special-category health data, profiling, and DSARs for insurers
GDPR Compliance for Healthcare and Healthtech
Article 9 health data, research bases, and patient rights
GDPR Compliance for Fintech Companies
Open banking, credit decisions, and DSARs for fast-moving fintech
GDPR Compliance for Maritime and Shipping
Crew data, ship-shore transfers, and passenger manifests for shipping operators
GDPR Compliance for SaaS Companies
Processor obligations, DPAs, and enterprise-buyer trust for B2B SaaS
CCPA
CCPA Compliance for E-commerce and Retail
Opt-outs, GPC signals, and loyalty programmes for consumer retail
CCPA Compliance for SaaS Companies
Service-provider contracts, B2B data, and consumer rights for software vendors
CCPA Compliance for Fintech Companies
Navigating the GLBA boundary, opt-outs, and sensitive financial data
CCPA Compliance for Healthcare and Digital Health
The data HIPAA doesn't cover — wellness apps, marketing, and consumer health tech
DPDP Act
DPDP Act Compliance for Banks and NBFCs
Honour data principal rights without breaking PMLA and RBI retention mandates
DPDP Act Compliance for Insurers
Consent, rights, and retention across decades-long policy lifecycles
DPDP Act Compliance for Stock Brokers and Capital Markets
Data principal rights that respect SEBI's record-keeping regime
DPDP Act Compliance for Healthcare and Healthtech
Patient consent, children's data, and breach response for health data
DPDP Act Compliance for EdTech Platforms
Verifiable parental consent and children's data governance for learning platforms
DPDP Act Compliance for Maritime and Shipping
Seafarer data governance for shipowners, managers, and manning agents
DPDP Act Compliance for Online Gaming
Dormancy erasure, parental consent, and child-safe telemetry for gaming platforms
DPDP Act Compliance for Telecom Operators
Subscriber consent, licence-condition retention, and rights at national scale
Not sure which regulations apply to you?
Book a 30-minute session and we'll map your regulatory exposure across DPDP, GDPR, CCPA, and sector rules.
Free 14-day trial · No credit card required · Setup in minutes