Deepak Mittal

Why an engineer leads a DPDP practice

Most of the DPDP Act is not satisfied by a policy. It is satisfied by systems: a consent record that proves what someone agreed to, a deletion that actually reaches every table and backup, logs kept for a year without becoming a store of unmasked identifiers, a breach process that produces the Board's report inside 72 hours. Those are architecture problems, and they are the problems Deepak has spent his career solving at scale.

He works alongside clients' legal counsel rather than in place of it. Counsel decides what the law requires of a business; Deepak's team designs and builds the controls that meet it, and produces the evidence that shows they work.

Why this site is drawn in Warli and Gond

Deepak's career has been spent on platforms where a person becomes a row in a table: millions of subscribers, accounts and customers. The DPDP Act turns each of those rows back into a person with rights. We drew the site in Warli, where every person in the village is painted on the wall, and Gond, where no shape is left empty, because that is the job: account for every person, and leave no piece of their data unaccounted for. How to read our drawings.

Career

1. 2020 – todayFounder and solution architect, Mirav Labs

   Builds and deploys systems for telecom operators, banks, retailers and hospitals, customer-facing from the first scoping call through integration, compliance review and rollout. Runs D2 Commerce OS, the commerce platform used by 1,000+ businesses.

2. 2018 – 2020CTO, Marketing Automation, Sinch India

   Ran technology and product for the marketing automation business after ACL (now Sinch) acquired the business.

3. 2012 – 2018Architect and CTO, Oorja

   Built Credence, a messaging and marketing automation platform deployed at banks and telecom operators that reached more than 120 million customers. ACL (now Sinch) acquired the business.

4. 2007 – 2012AVP Technology, Paytm

   Built the technology team and the platform it ran on from nothing, serving hundreds of millions of users with 99.99% uptime across geo-redundant sites.

5. 2001 – 2007Product architect and R&D, Hughes Software Systems, Alcatel-Lucent (Belgium), Conexant

   3GPP standards, VoIP and softswitches, billing, and the protocol stacks inside production routers.

Compliance in practice

Privacy and security have been part of the delivery, not an afterthought, across regulated sectors:

The lesson he brings from those deployments: adoption depends on evidence. Engineers, auditors and boards accept a system when every decision it makes shows the record behind it. The same principle shapes the control board and evidence pack DPDP Ready builds for clients.

What Deepak does on an engagement

• Scoping: usually runs the first call himself, and maps your systems and data flows to the obligations that apply.
• Architecture: designs the consent ledger, rights workflows, retention and erasure, and breach response to fit your stack.
• Review: reviews controls before they are marked done, and the evidence behind them.
• Board and auditors: explains the same system to engineers, to your board and to auditors, in the terms each one needs.

Education

• Master of Computer Applications, University of Delhi (with distinction)
• BSc (Honours) Mathematics, Hansraj College, University of Delhi

DPDP Ready is an implementation practice, not a law firm, and does not give legal opinions. The guides on this site are general information, not legal advice.