Rule Expert
LIVE WEBINAR FOR HOSPITAL LEADERS

“We’re NABH accredited, so we’re covered.” MYTH #1 9 common DPDP misconceptions in healthcare, and what to do instead

A 60-minute live session for hospital leaders on what the DPDP Act actually requires of you, and what to do before May 2027. With Dr. (Major) Raja Dutta of Aarogya Hospital, technology lawyer Mimansa Ambastha and Rule Expert founder Nitin Ray.

THURSDAY 12 NOV 2026
TIME 3:00 PM IST 60 minutes, live
WHERE Zoho Webinar Online, link by email
ON THE PANEL Dr. (Major) Raja DuttaAarogya Hospital Mimansa AmbasthaStarlex Consultants Nitin RayRule Expert
Reserve my seat See the 9 myths
REALITY NABH and DPDP overlap. They are not the same test.
01 / 09 MYTH
“Our accreditation covers DPDP.”
REDACTED UNTIL 12 NOV
Live Q&A with the panelSend your question in advance
Readiness checklist included
THE PANEL

The law, the practice and the bedside, on one stage

A hospital leader, a technology lawyer and a compliance founder, answering the questions hospitals actually ask.

Dr. (Major) Raja Dutta FEATURED SPEAKER
Dr. (Major) Raja Dutta Medical Director, Aarogya Hospital, Delhi · Board Advisor and Healthcare Strategist
  • Served in Operation Vijay (Kargil War) and Operation Parakram
  • Member Secretary, AIIMS Medico-Legal Committee, which prepared medical opinions for the Supreme Court
  • Hospital administration at AIIMS; financial management at IIM Ahmedabad
Read full bio

A veteran of the Indian Army Medical Corps who went on to lead hospitals as Medical Director, COO, CEO and Group CEO, driving hospital development, operational excellence and quality improvement.

He wrote the Government of India’s Medical Purchase and Procurement Manual and redesigned the medical staffing norms of AIIMS. More recently he has worked on healthcare mergers, acquisitions and funding.

He speaks regularly at healthcare leadership forums, has written concept notes on AI-enabled hospitals, digital health and preventive care, and serves as a Non-Executive Director and board advisor to several healthcare organisations.

Mimansa Ambastha THE LAW
Mimansa Ambastha Advocate · Founder and Managing Partner, Starlex Consultants LLP
  • Led legal and compliance for the national Income Tax e-Filing Programme (2019–2025), safeguarding 5 crore+ taxpayer records
  • Has trained 5,000+ senior professionals on the DPDP Act
  • LLM, UC Berkeley · IAPP CIPM, CIPP/E, CIPP/A
Read full bio

One of India’s leading legal experts in data privacy, AI governance and technology law, with more than a decade at the meeting point of law, technology and business. She began her career at Cyril Amarchand Mangaldas, advising India’s largest technology platforms.

She designed the Certified Data Protection Officer curriculum at the Future Crime Research Foundation and co-authored The AI-Enabled Boardroom. NDTV, DW News and LawMic regularly quote her on technology law.

LLB (Hons), NLU Jodhpur (Batch Topper); LLM in Technology Law, UC Berkeley (Dean’s List).

Nitin Ray THE PRACTICE
Nitin Ray Founder and CEO, Rule Expert
  • Leads Rule Expert and its parent company, ExpertInAsia Pvt. Ltd.
  • Works with startups, SaaS companies and large enterprises on DPDP readiness
  • Jury member, BGI Hackathon: Vision 2047 | Viksit Bharat, Indore
Read full bio

He founded Rule Expert to turn DPDP compliance from a manual, paperwork-heavy exercise into something built into the systems a business already runs, so privacy becomes part of everyday operations.

He writes widely on consent journeys, cross-border data transfers for SaaS businesses, HR data protection and the cost of non-compliance. His message: in India’s digital economy, trust is a business advantage.

WHY NOW

The clock is already running

UP TO₹250 crore Penalty for failing to take reasonable security safeguards against a personal data breach
  1. STEP 1 · NOW Map, fix, prepare The DPDP Rules are notified. The window to get ready is shrinking.
  2. 12 NOV 2026YOU’RE INVITED This session 60 minutes at 3:00 PM IST on what applies to your hospital, and what to do first.
  3. 13 NOV 2026 Consent Managers The Rules’ Consent Manager provisions come into force, the day after this session.
  4. MAY 2027DEADLINE Full obligations Notice, consent, security safeguards, breach reporting and patient rights apply to every hospital.
9 COMMON MYTHS

Beliefs we hear from hospitals every week

Each sounds reasonable. Each leaves a gap the Data Protection Board can act on. Three answers below. The rest stay redacted until we go live.

01 · ACCREDITATION MYTH

“We’re NABH accredited, so we’re covered.”

REALITY REDACTED · REVEALED LIVE
02 · SCOPE

“Small hospitals are exempt.”

REALITY

The Act sets no bed-count or turnover threshold. If you process patients’ digital personal data, you are a Data Fiduciary.

03 · SCOPEMYTH

“Our records are on paper, so the Act doesn’t apply.”

REVEALED LIVE
04 · CONSENT

“Emergency treatment means no consent issues.”

REALITY

You may act without consent in a medical emergency, but only for that purpose. Billing, follow-ups and outreach afterwards need their own basis.

05 · CONSENTMYTH

“The signature on our admission form is consent.”

REVEALED LIVE
06 · MINORSMYTH

“For a child, a parent’s signature covers everything.”

REVEALED LIVE
07 · VENDORS

“Our EMR vendor takes care of DPDP.”

REALITY

Your vendor processes data for you. The hospital remains the Data Fiduciary and stays accountable, so your contract must say how patient data is protected.

08 · VENDORSMYTH

“Data we send to TPAs and insurers is their problem.”

REVEALED LIVE
6 answers still redacted. They’re revealed on 12 November.
RESERVE YOUR SEAT

Thu 12 Nov.
3:00 PM IST.
Zoho Webinar.

A 60-minute live session. Your joining link arrives by email as soon as you register.

INCLUDED FOR EVERY REGISTRANT The DPDP Readiness Checklist for Hospitals
Patient data mapped across HIMS, LIS, PACS and billing
A clear notice at registration and admission
Vendor contracts that cover patient data
A breach response plan that meets the timelines
Arrives with the recording, whether you attend live or not.
Recording if you can’t make it live Send your question in advance
We practise what we teach. You choose what we may contact you about, and you can change your mind at any time.
Your details TAKES 60 SECONDS
YOUR CHOICES

The session runs on Zoho Webinar, which receives your name and email to admit you. We keep registration details for 3 months after the session, then delete them. Withdraw any choice from the link in any email, or write to [grievance email]. Read our privacy notice.

Required. Prefer Zoho’s own page? Register on Zoho Webinar

FAQ

Good questions

Anything else? Add it to the form and the panel will take it live.

How do I join?

The session runs on Zoho Webinar on Thursday, 12 November 2026 at 3:00 PM IST. Your joining link arrives by email as soon as you register.

Will there be a recording?

Yes. Every registrant receives the recording and the checklist on Friday, 13 November, whether they attended or not.

Can my team join?

Yes, and we recommend it: compliance, IT, quality and clinical leads each hold part of the answer. Each person registers separately so they get their own link.

Is this a sales pitch?

No. The Rule Expert walkthrough is under 8 minutes of the 60. Everything else is the law, the clinical view and your questions.

What happens to my details?

We use them only for the choices you tick on the form. You can withdraw any of them at any time, and we delete registration details 3 months after the session.