Photo of Sara Sundaram

Sara Sundaram

Partner in the Disputes and White Collar Crime Practice at the Mumbai office of Cyril Amarchand Mangaldas. Sara specializes in the areas of internal investigations and compliance training, white-collar crimes, corporate and financial investigations, fin tech and financial matters and international sanctions. She has assisted and advised several foreign investors, corporates and financial institutions on anti-corruption, anti-bribery issues, anti-money laundering, sanctions violations, and serious fraud investigations.

She also advises several foreign and domestic Clients on on AML/ABAC compliance, regulatory compliance and trade sanctions, and has handled internal investigations into compliance violations and whistle-blower complaints for corporations and financial institutions. She has considerable expertise in corporate governance, international sanctions, and international fraud related issues and regulatory compliance issues and financial crimes and Fintech.  She can be reached at sara.sundaram@cyrilshroff.com

Summary: This article is the second part of a two-part series, examining the implications of India’s Digital Personal Data Protection Rules, 2025, on internal investigations conducted by organisations and their legal counsel. While Part I addressed the foundational framework and the applicability of exemptions under the DPDP Act, particularly Section 17(1)(c); Part II focuses on the practical compliance obligations that Data Fiduciaries must navigate during internal investigations, including security requirements, breach notification protocols, data retention and erasure mandates, and cross-border transfer complexities.Continue Reading Implications Of The Digital Personal Data Protection Rules, 2025:  Stoking Internal Investigations – Part II

Implications Of The Digital Personal Data Protection Rules, 2025:  Stoking Internal Investigations – Part I

Summary: India’s Digital Personal Data Protection Rules, 2025, effective November 13, 2025, have fundamentally transformed the regulatory landscape for internal investigations. This analysis is the first part in a two-part series examining the critical compliance challenges facing organisations and law firms navigating data-sensitive proceedings under the new regime.Continue Reading Implications Of The Digital Personal Data Protection Rules, 2025:  Stoking Internal Investigations – Part I

Navigating the MSME Minefield: When Party Autonomy Meets Statutory Reality

Summary: The recent decision in GEA Westfalia highlights the importance of an exclusive jurisdiction clause in contracts involving MSMEs, particularly for determining the court with the jurisdiction to hear challenges to awards passed as part of the mandatory statutory arbitration under the MSMED Act.Continue Reading Navigating the MSME Minefield: When Party Autonomy Meets Statutory Reality

Summary: This blog examines the increased compliance challenges faced by Indian companies due to the introduction of EU sanctions. European financial institutions and trading partners strictly enforce these measures, often adopting a zero-tolerance approach to secondary exposure. Consequently, Indian businesses with links to European markets must conduct rigorous due diligence as they face the risk of being cut off from euro-denominated transactions or even delisted from European stock exchanges.Continue Reading Emergence of the EU sanctions regime and their wide-reaching cross-border impact

Waste of an ODR process

Summary: The methods for appointment of arbitrators, as laid down by the Supreme Court, namely, mutual consent of the parties or pursuant to Section 11 of the Arbitration and Conciliation Act, 1996, were reiterated by the Bombay High Court in a Section 34 challenge. The petition relates to a financial institution unilaterally appointing arbitrator(s) through an ODR platform. The Bombay High Court sought statements from two ODR platforms, namely, Presolv360 and ADReS Now, on steps taken to ascertain whether the request for the appointment is lawful. It is imperative to have a carefully drafted arbitration clause to ensure that the outcome of arbitral proceedings involving an ODR platform aren’t nullified.Continue Reading Waste of an ODR process

The present US administration signed an Executive Order (“EO 14209”) in February, halting the enforcement of the Foreign Corrupt Practices Act (FCPA), pending new guidance to prosecutors. On June 10, 2025, the US Department of Justice (DOJ) issued new guidelines (“Guidelines”) on the enforcement of the FCPA, marking a significant shift in its approach to combating foreign bribery. These changes are a part of a broader strategy to recalibrate US anti-corruption efforts in line with national security interests and economic competitiveness.Continue Reading Global, India implications of US DOJ resuming scaled-back enforcement against foreign bribery

Expanding the Regulatory Framework: Deep dive into SEBI’s new AML/CFT guidelines

INTRODUCTION

The Securities and Exchange Board of India (‘SEBI’), through its Master Circular dated June 06, 2024, issued ‘Guidelines on Anti-Money Laundering (“AML”) Standards and Combating the Financing of Terrorism (“CFT”)/ Obligations of Securities Market Intermediaries under the Prevention of Money Laundering Act, 2002,’ (“Master Circular/2024 Guidelines”),[1] emphasising the need for stricter AML/ CFT measures in the securities market, given global efforts against drug trafficking, terrorism, and other serious crimes. The 2024 Guidelines supersede the SEBI AML/ CFT Guidelines of February 03, 2023 (“2023 Guidelines”),[2] strengthening the obligations of market intermediaries and aligning with international standards from the Financial Action Task Force (“FATF”).Continue Reading Expanding the Regulatory Framework: Deep dive into SEBI’s new AML/CFT guidelines

Internal Investigations Under the Digital Personal Data Protection Act, 2023

Introduction

The Digital Personal Data Protection Act, 2023 (“Act”), marked a pivotal development in India’s framework for data protection by addressing the longstanding need for safeguarding personal information, data protection, and data handling. Continue Reading Internal Investigations Under the Digital Personal Data Protection Act, 2023

Time to harmonize AML control systems for global, commercial Indian companies

Introduction

For many global organisations, finding the right balance between having global, unified compliance programs, and the need to address local legal and compliance risks, is a challenge. In this blog, we will address the challenge that money laundering and related issues presents to Indian companies operating in Europe.Continue Reading Time to harmonize AML control systems for global, commercial Indian companies