New Delhi, Nov. 11 -- Indian companies are facing a growing number of requests for data from foreign regulators, putting them in a tricky position over what they can legally share. From customer records and transaction logs to internal chats and lab data, their demands are prompting businesses to bring in lawyers much earlier, rather than risk breaching Indian laws.

Law firms say such work has picked up sharply in 2026, as companies prepare for the cross-border provisions of India's Digital Personal Data Protection (DPDP) law to take effect in May 2027. The requests are largely coming in from securities, financial, drug and law-enforcement agencies in the US, UK, EU and Singapore.

"We've seen a very clear uptick this year," said Vinay B...