Varun Pathak

Partner, Shardul Amarchand Mangaldas Co-Chair, CDPAC

Varun is an Advocate-on-Record with a rich experience of advisory and litigation of around 16 years. He is extensively experienced in handling, strategizing, advising on and appearing in commercial litigation and litigation relating to intermediary liability, intellectual property, data protection, privacy, and other aspects of Information Technology laws, regulation and policy. He regularly advises clients on complex issues in the information technology and ecommerce sector and has a rich experience of advising clients (both in private and public sectors) on contentious matters relating to contractual, regulatory issues, issues pertaining to constitutional and administrative laws, technology laws, etc. His areas of experience and exposure in litigations includes Information Technology Laws – Matters in the Supreme Court, High Courts, Consumer Forums, and other Courts in India in litigation pertaining to constitutional challenges to information technology laws, intermediary liability, e-commerce, privacy, data protection, intellectual property. Varun has advised clients in diverse areas of laws which includes advising a social media conglomerate and its affiliates on all legal and regulatory aspects of its operations in India, including statutory and regulatory compliance requirements, directions and requests from the State and law enforcement agencies, from an intermediary liability, e-commerce, law enforcement access, payments regulations, and privacy laws perspective.

Shaili Bhandari

Head of Legal, India and Data Protection Officer Everest Business Advisory India PVT LTD. dba Everest Group Co-Chair, CDPAC

Shaili is a senior legal executive with over 15 years of experience providing legal counseling and guidance to large corporations and their executives on a broad range of global commercial contracting, data privacy, security and regulatory issues. In her current role, Shaili leads the privacy function globally and has direct responsibilities for defining and driving global privacy strategy. Prior to joining Everest, Shaili has worked with EY in capacity of Data Privacy Leader, India Region (including Nepal and Bangladesh).

Neeru Walia

Director, Global Privacy Council, Nagarro Vice-Chair, CDPAC

With extensive experience in GRC and data protection compliance, Neeru is an accomplished professional specializing in regulatory compliance and industry standards. She holds prestigious certifications in CIPP/E, CIPT, CIPM, DCPLA, CISA, ISO 27001, ISO 9001, and PMP. She is a thought leader and a sought-after keynote speaker at leading conferences and webinars, where she passionately champions robust data security and privacy practices and compliance excellence.

Chirag Jain

Associate Partner, DSK Legal Vice-Chair, CDPAC

Chirag Jain is an Associate Partner at DSK Legal and is part of the Firm’s TMT practice group. He has over a decade of experience in advising clients in tackling intricate challenges relating to cutting-edge technologies, employing a pragmatic and business-oriented methodology. Apart from transactions, his practice consists of acting for and advising promoters, management teams, corporate clients, and institutional investors and he is well-recognized amongst his clients for his expertise in advising on matters pertaining to data protection, cybersecurity, payments, and technology transfers and assessments. In connection with evolving data protection landscape in India, Chirag has been a part of the discussions and consultations conducted by the Ministry of Electronics and Information Technology. Chirag has been consistently recognized as a ‘Recommended Lawyer’ by Legal 500 Asia Pacific for ‘Data Protection’ for 3 years (2023, 2024, and 2025) in a row. He was also recognized as a ‘Recommended Lawyer’ in in ‘Fintech and Financial Services Regulatory’ in the year 2023, and in ‘Corporate M&A and TMT’ in the year 2025.

Athul Gaikwad

Associate Director, Cyber Security & Data Privacy, LTIMindtree Vice-Chair, CDPAC

Athul is a distinguished data privacy and cybersecurity professional with over 12 years of experience in the field with various domains including IT, Banking and Insurance. He currently holds the position of Associate Director for Cybersecurity and Data Privacy at LTIMindtree, where he plays a pivotal role in ensuring privacy compliance for the organisation, advising on cross-border data protection issues and conducting internal audits to strengthen data governance frameworks. In his role, he takes care of both internal and external audits for ISO 27001 and ISO 27701 standards, ensuring the organization's adherence to these critical information security and privacy management frameworks. In his previous roles as an Information Security Officer at both State Bank of India and IDBI Bank, Athul gained extensive experience in information security and data protection. He has provided expert advisory services on GDPR, international data transfers, vendor risk management, data breach response, data subject rights requests, and AI governance, compliance requirements, risk assessments, DPIAs, and contractual frameworks. He is also certified as a Certified Information Privacy Professional Europe, DSCI Certified Data Protection Officer, DSCI Certified Privacy Professional, One Trust Fellow in Privacy Technology, Certified Information System Auditor (CISA), ISO 27001 Lead Auditor, Certified Ethical Hacker, and GDPR Data Protection Officer (DPO).

Shreya Singh

Senior Associate, DSK Legal Secretary, CDPAC

Shreya is a Senior Associate at DSK Legal and is part of the technology, telecommunications and M&A practice group. With an industry focus on the e-commerce, fintech, retail and cybersecurity, she routinely advises various clients engaged in disruptive sectors on aspects pertaining to data protection, cybersecurity, payments, digital lending, blockchain, technology transfers and assessments, technology licensing and assignments, online gaming, telecommunications, and pharmacy. Apart from technology, her practice further consists of acting for and advising promoters, management teams, corporate clients, and institutional investors on domestic and cross-border transactions, including JVs, primary and secondary equity issues, mergers, restructuring and business transfers.

Suditi Tandon

Senior Officer - Global Data Privacy Office Specialist Corporate Legal & Compliance Department, Forvia Hella Secretary, CDPAC

Suditi Tandon is a certified GDPR Practitioner with 3+ years of international experience in data privacy and IT law, specializing in UK and EU data protection regulations. She currently serves as a Senior Officer – Global Data Privacy Office Specialist at Forvia Hella, where she ensures GDPR compliance, advises on cross-border data protection matters, conducts internal audits to enhance data governance frameworks across the organization, and spearheads compliance with Indian data protection law.,Her prior roles as a Data Protection Paralegal, GDPR Consultant, and Data Protection Assistant have given her extensive exposure to UK and EU data protection laws. She has provided legal advisory services on GDPR, UK DPA 2018, PECR, international data transfers, vendor risk management, data breach response, data subject rights request and AI governance. Additionally, she has acted as an outsourced Data Protection Officer (DPO) for over 20 UK-based clients, guiding them through complex compliance requirements, risk assessments, DPIAs, and contractual frameworks such as DPAs, SCCs, and TRA documentation.,Suditi holds an LLM in Technology, Media and Telecommunication (TMT) Law from Queen Mary University of London, where she specialized in EU Data Protection Law, Cybersecurity, and AI Regulation. She is currently working towards attaining the IAPP Certified Information Privacy Technologist (CIPT) certification, further solidifying her expertise in privacy engineering and emerging technologies.

Summit Goyal

Founder - BNC Global Expert Member, CDPAC

Summit Goyal has over 18 years of experience, including 14+ years in consulting and risk advisory services across various industries such as Real Estate, Retail, NBFC, F&B, Manufacturing, Automobiles, Beverages, Electronics, and FMCG. He has extensive experience in GRC services, specializing in Enterprise Risk Management (ERM), SOX compliance, Internal Controls over Financial Reporting (ICFR), IT General Controls (ITGC), SOC 1 & SOC 2 audits, cybersecurity reviews, and other reviews. Additionally, he has provided strategic advisory on data architecture, cloud structures, and MSME development. Summit serves as a Board Member for more than four UK/US-based companies, overseeing corporate governance and compliance. A rank holder (AIR 50) in CA Final, he was awarded an Excellence Certificate by ICAI. Before establishing his consulting firm, he worked with KPMG, Protiviti Consulting, and M/s Sahni Natrajan & Bahl. Summit specializes in CFO services, financial reviews, assurance, and operational effectiveness, aligning management vision with company processes to enhance performance. He has led strategic projects such as Finance Transformation, ERM Implementation, and GRC Tool Deployment.