core Estimated learning time: 4 h

5.5 Governance, compliance and Indian data law

You can answer a compliance questionnaire about your own deployment honestly.

Before:04. Networking in the CloudUnlocks:06. Containers & Kubernetes

Accounts and projects are blast-radius boundaries, organisation policies are guardrails that make the right thing the default, and tags are how anything is ever attributed later — this topic is the administrative skeleton of a responsible deployment. For India specifically it covers DPDP Act 2023 obligations: consent, purpose limitation, minimisation. It closes the security module because compliance questions arrive once something real is running. The standard it sets is answering a compliance questionnaire honestly about your own deployment — which requires knowing, not assuming, what your account actually does.

Work through these

  • Accounts, projects and subscriptions as blast-radius boundaries

    Separate accounts and projects limit how far a mistake or a compromise can spread. Deciding those boundaries early is far cheaper than rearranging them once workloads are running.

  • Organisation policies, guardrails and tagging standards

    Organisation-wide rules can prevent whole categories of mistake before anyone makes them, and a consistent labelling standard is what makes cost and ownership answerable later. Both are dull and both pay off.

  • DPDP Act 2023 obligations; consent, purpose limitation, minimisation

    India's data protection law places real obligations on anyone handling personal data: consent for a stated purpose, use limited to that purpose, and collecting no more than needed. These apply to student projects that hold real people's data too.

  • Audit evidence: what you must be able to produce, and when

    Compliance ultimately asks you to produce evidence, not assurances, and knowing which records you must be able to show shapes what you log from the start. Assembling it afterwards is rarely possible.

Sign in to keep your progress.

Free resources

We haven't checked most of these for screen reader use yet.

Links last checked 29 Aug 2026.

Stuck here?

Ask a mentor. A real person answers, and they can see exactly which topic you're on. Usually within a couple of working days.

Checking your session…

Topics shown in module order.