Legal framework for foreign data-centre operators and hyperscalers in India.
India has become one of the most attractive data-centre markets in the world, and a foreign operator or hyperscaler can invest one hundred percent under the automatic route, but the legal architecture around the asset is where the value is won or lost. Data localisation, the RBI payment-data mandate, the DPDPA treatment of hosted personal data, state data-centre incentive policies offering power and land benefits, and the power and connectivity agreements that make a facility viable all have to be structured together.
The customer contracts add a further layer, because enterprise and regulated tenants demand localisation guarantees, audit rights, liability allocation, and exit and migration assistance that the operator must be able to deliver and stand behind. We structure the investment and the state-incentive claim, build the data-protection and localisation compliance framework, and negotiate the power, connectivity, and hosting and colocation contracts so the facility is both compliant and commercially robust.
Structuring the one hundred percent FDI and the state data-centre incentive, land, and power benefits.
Building the data-localisation framework for the DPDPA, the RBI payment-data mandate, and sector-specific residency requirements.
Negotiating hosting, colocation, and managed-services contracts with localisation, audit, liability, and exit terms.
Negotiating the long-term power, open-access, and connectivity agreements that underpin the facility economics.
Structuring the DPDPA roles, processing terms, and security obligations between the operator and its tenants.
Aligning the facility with the IT Act intermediary framework and the emerging data-centre policy framework.
Yes. Data centres allow one hundred percent foreign investment under the automatic route. The legal focus is on localisation compliance, state incentives, power and connectivity contracts, and the customer-facing terms rather than on the FDI approval itself.
Yes, significantly. The DPDPA, the RBI payment-data mandate, and sector residency rules shape what data must stay in India, which is often the commercial reason customers choose a local facility. The operator must be able to guarantee and evidence localisation to its tenants.
Localisation guarantees, audit and inspection rights, clear liability allocation, service levels, and exit and migration assistance. Regulated customers in banking and financial services add their own regulatory flow-downs, all of which must be built into the hosting and colocation contracts.
No. No engagement is treated as accepted until conflicts, scope and terms are confirmed in writing. An initial discussion is confidential and is used only to understand the matter and assess fit.
Share the key facts for a confidential preliminary assessment of your India matter.