Advocates & legal counsel · Hyderabad · Telangana · India
Lawyers for business,technology & dataprivacy in Hyderabad.
SIRI Law LLP is a Hyderabad-based law firm advising businesses, founders and individuals on technology and intellectual property, data privacy and DPDP compliance, startup and commercial matters, litigation, employment, property and cyber law. Our work is scoped to the facts, applicable law and the client’s objectives.
- Consultation by arrangement
- Conflicts checked before we meet
- Fees agreed in writing
- In person in Hyderabad or online
- Phone, WhatsApp or video
The firm
We are a law firm for people who build, run and protect things: companies, careers, families and data. Eleven practice areas, one accountable team, and no hand-offs between the advice you get and the work that follows.
What we do
Practice areas
Swipe to browse all eleven →
Corporate & Commercial
Incorporation, shareholder and vendor agreements, technology transactions and mergers, structured to be commercially practical and enforceable when it matters.
Explore this practice →Litigation & Dispute Resolution
Advocacy across commercial, corporate, consumer and technology disputes, from urgent injunctions to long-running tribunal matters.
Explore this practice →Data Privacy & Cyber Law
DPDPA 2023 programmes, cross-border transfers, breach response and cybercrime advisory, led by advocates who work alongside forensic engineers.
Explore this practice →IP & Technology Law
Protecting and enforcing what your business creates: trademarks, patents, copyright, trade secrets and technology licensing.
Explore this practice →Banking & Finance
Regulatory and transactional counsel for banks, NBFCs, payment companies and fintechs: licensing, compliance, cross-border investment and financing.
Explore this practice →- RBI compliance and licensing
- FEMA and foreign investment
- SEBI regulation
- Fintech counsel→
Employment & Labour
Employment contracts, workplace policies, POSH compliance, labour-code readiness, restructuring and defending or bringing employment claims.
Explore this practice →- Employment disputes→
- Wrongful termination→
- POSH and workplace policies
- Workforce restructuring
Real Estate & Property
Purchase and sale, title diligence, lease structuring and RERA matters for developers, investors, businesses and homeowners.
Explore this practice →- Title due diligence
- Lease and licence structuring
- RERA compliance
- Property disputes
Taxation
Direct and indirect tax advisory, regulatory filings and cross-border structuring that stands up to scrutiny.
Explore this practice →- Direct tax advisory
- Indirect tax and GST
- Cross-border tax structuring
- Regulatory filings
Family Law
Sensitive personal matters handled with discretion: matrimonial proceedings, succession, guardianship and family dispute resolution.
Explore this practice →- Matrimonial matters
- Succession and wills
- Guardianship
- Family dispute resolution
Cybersecurity & Compliance
SIRI Security: penetration testing, red teaming, cloud security and certification programmes, run under a single legal engagement so findings stay privileged.
Explore this practice →AI & Emerging Technology
Governance, contracts and liability for AI, blockchain and digital assets, and legal counsel for health-technology products.
Explore this practice →Not sure which team you need?
Describe it in two lines. We will point you to the right advocate.
Cyber incident response · time-sensitive
Cyber incident or data breach? Preserve evidence. Assess reporting duties.
Some cyber incidents must be reported to CERT-In within six hours under its 2022 Directions. Applicability depends on the incident and the organisation. Preserve relevant evidence and obtain prompt advice on containment, reporting and regulatory obligations. Our legal and technical response can be coordinated where engaged.
Planning tool
When must we notify CERT-In?
Sectors
Fluent in the rules of your industry.
Every sector has its own regulator, its own contracts and its own failure modes. We bring sector-specific counsel to each, from RBI and SEBI to ABDM and IRDAI.
- 01FinTechRBI · PA/PG · Licensing→
- 02Banking & FinanceRBI · FEMA · SEBI→
- 03HealthcareABDM · HIPAA · DPDPA→
- 04SaaS & TechnologyContracts · SOC 2 · IP→
- 05StartupsFormation · ESOP · Funding→
- 06E-commerce & RetailConsumer law · Marketplaces→
- 07ManufacturingContracts · Compliance · OT→
- 08LogisticsSupply chain · Carriage→
- 09Media & EntertainmentIP · Content protection→
- 10InsuranceIRDAI · Claims→
- 11Energy & UtilitiesCritical infrastructure→
- 12TelecomLicensing · Data→
- 13Defence & GovernmentNCIIPC · Procurement→
SIRI Law LLP
When the decision matters.
Strategic counsel for the moments that shape what comes next.
How we work
Clear from the first conversation.
- 01
A first conversation
Tell us what is happening, at whatever level of detail you have. We check conflicts and jurisdiction first, and if we are not the right firm we say so immediately.
- 02
An honest assessment
You receive our view of the situation, the risks, the options and the cost, in writing, before anything is billed. Fixed fee, retainer or staged estimate, whichever suits the matter.
- 03
One named lead, one team
A named advocate owns your matter. Where the problem has a technical side, our security engineers and forensic examiners work inside the same engagement, not in a separate one.
- 04
Cover that continues
When the matter closes we do not disappear. Retainer clients keep a lawyer who already knows their business, plus regulatory updates as the rules change.
Selected outcomes
Outcomes, not claims.
A selection of matters, anonymised at the client's request. The deadline in each one was the real deadline.
- 72hrs
Ransomware response, listed fintech
Attorneys and forensic engineers moved together. CERT-In notification and containment closed within 72 hours and no regulatory penalty followed.
- Cyber law
- Incident response
- ₹8Cr+
SaaS acquisition due diligence
Legal and security diligence ran as one workstream instead of two, so material risks surfaced early and were priced into the final deal terms.
- Corporate
- M&A
- 3regimes
Cross-border data breach
A single breach triggered notification duties in India, the EU and the US at once. All three were managed in parallel and no enforcement action followed.
- Data privacy
- Cross-border
- 14weeks
SOC 2 Type II for an enterprise deal
An enterprise deal was on hold for one line item. Legal drafting and the technical audit ran in parallel and certification was delivered in 14 weeks.
- Compliance
- SaaS
Client names withheld and details anonymised by sector and role. Outcomes are specific to those matters and are not a guarantee of results in any other situation.
Your next step
Three easy ways to begin.
Pick whichever suits you. Each route begins with an enquiry and an appropriate conflicts check. Scope and professional fees are discussed before an engagement is confirmed.
Speak to an advocate
Call the firm to discuss your legal enquiry and the appropriate next steps.
+91 79819 12046 → 02Message us on WhatsApp
Share the situation at a high level. We will review your enquiry and advise on appropriate next steps. Please do not send confidential documents until a secure channel is confirmed.
Open WhatsApp → 03Request a consultation
Send a short enquiry and choose your practice area. We come back to you with a time, in person in Hyderabad or online.
Fill the form →Digital Forensics · Cyber Law
Every detail connects.
From documents to devices to what a court will accept as evidence — the thread runs through everything we build.
SIRI Shield · Retainer
A lawyer who already knows your business.
Fixed-fee counsel for growing companies: a dedicated advocate, security testing and incident response on a predictable monthly retainer. No surprise invoices.
Shield Starter
Pre-seed and seed startups, early fintech and healthtech
- Dedicated advocate, 10 hours a month
- DPDPA gap assessment and monitoring
- Privacy policy, terms and cookie notice drafting
- Annual external penetration test
- Incident response legal support, 4-hour SLA
- One technology contract review a month
Shield Professional
Series A to C companies, regulated startups, SaaS serving enterprises
- Dedicated advocate, 25 hours a month
- Full DPDPA implementation and DPO support
- Quarterly penetration tests, two scopes
- ISO 27001 and SOC 2 readiness programme
- Incident response legal support, 2-hour SLA
- Three contract reviews a month, plus fundraising documents
Shield Enterprise
Large and regulated organisations with multi-jurisdiction exposure
- Named senior partner, unlimited access
- DPDPA, GDPR, HIPAA and more, one team
- Virtual DPO with a named officer
- Red team and full-scope security testing
- 1-hour incident response SLA, for urgent enquiries
- Unlimited contract review and negotiation
Our people
Named counsel. Real accountability.
Advocates, security engineers and forensic examiners who have advised through live breaches, regulatory investigations and cross-border transactions. Every engagement carries a named lead who answers for the outcome.
Adv. Chetan Seripally
Founder & Managing Partner · LL.B · CISSP · CIPP/ECounsels boards and CISOs through cyber incidents, DPDPA implementation and AI governance. Practises before the Supreme Court of India and is enrolled with the Bar Councils of Uttar Pradesh and Telangana.
Leads data protection across DPDPA, GDPR and HIPAA.
Heads litigation and disputes before the Delhi High Court and NCLT.
Leads AI and emerging-technology law.
Leads corporate and commercial, from venture rounds to M&A.
Heads governance and compliance programmes.
Directs offensive security and incident response.
Prepares court-admissible forensic reports and testifies as an expert witness.
Advises startups from incorporation through Series C.
Advises banks, NBFCs and payment aggregators on RBI and SEBI matters.
Runs adversarial testing of LLM and RAG deployments.
Advises hospitals and healthtech platforms on ABDM and HIPAA.
SIRI Law LLP
Complexity requires perspective.
Insights
Where law and technology are moving.
Commentary on court rulings, regulation and compliance, written to change what your organisation does next.
Digital content protection strengthened: Delhi High Court issues landmark injunction against IPTV piracy
Read the article →The legal self: how Denmark's deepfake law is redefining copyright and identity
Read the article →A comprehensive guide to India's CERT-In 6-hour cyber incident reporting mandate
Read the article →ISO 27001 certification in India: a step-by-step guide
Read the article →What we do
Legal services for business, technology and people.
SIRI Law LLP is a Hyderabad-based law firm. We advise businesses, founders and individuals on legal questions involving commercial relationships, technology, personal data, disputes and regulatory obligations. The appropriate scope depends on the facts, jurisdiction and engagement agreed.
Technology, data privacy and DPDP compliance
Legal support for data protection governance, privacy notices, data-processing arrangements, vendor contracts, incident response and questions arising under India’s Digital Personal Data Protection Act, 2023.
Explore data privacy law →Startups, SaaS and commercial contracts
Advice on business formation, founder and shareholder arrangements, SaaS and technology agreements, commercial negotiations, contractual risk and business disputes.
Explore corporate law →Cyber law and data-breach matters
Coordinated legal and technical support for cyber incidents, evidence preservation, reporting analysis, digital investigations and follow-on disputes. Incident obligations are assessed against the applicable facts and rules.
Explore incident response →Litigation and dispute resolution
Assessment and representation for appropriate civil, commercial, employment, property and other disputes, subject to jurisdiction, conflicts checks and an agreed engagement.
Explore litigation →Questions
Before you reach out.
The questions we hear most. If yours is not here, ask us directly.
What areas of law does SIRI Law LLP cover?
SIRI Law LLP advises on corporate and commercial matters, litigation and dispute resolution, data privacy and cyber law, intellectual property and technology, banking and finance, employment and labour, real estate, taxation, family law, cybersecurity compliance, and AI and emerging technology law.
How does the first consultation work?
Consultation arrangements, scope and professional fees are discussed with the prospective client. The firm checks for conflicts before accepting an engagement. Contacting the firm does not itself create an advocate–client relationship; an engagement is confirmed separately.
Can your advocates appear in court and before tribunals?
Our advocates are enrolled with the Bar Council and appear before courts, tribunals and regulators in matters we take on, including High Courts, NCLT and consumer forums, where the matter and applicable jurisdiction permit. At scoping we confirm the forum, the counsel and the plan, so you know who will be in the room.
How are your fees structured?
Fees are agreed in writing before work begins. Defined projects may be priced at a fixed fee, ongoing legal needs may be covered by a retainer, and litigation fees are scoped by stage. Any applicable taxes are addressed in the engagement terms.
We have had a cyber incident or data breach. What should we do first?
Prioritise containment and safety, preserve relevant evidence, document what is known, and seek appropriate technical and legal assistance. Applicable reporting duties and deadlines depend on the incident, the organisation and the rules that apply. Do not assume one deadline applies to every incident.
How quickly can we become DPDPA compliant?
The time required for a DPDP Act compliance programme depends on the organisation’s data flows, systems, vendor relationships, existing controls and remediation needs. A gap assessment is the appropriate starting point for estimating scope, sequencing and timelines.
Why put legal and security work under one engagement?
Coordinating legal advice with forensic and security work can help align evidence preservation, incident response and regulatory analysis. Whether a particular communication or report is legally privileged depends on the facts, purpose, applicable law and how the engagement is structured; privilege should never be assumed automatically.
Do you work with clients outside Hyderabad and India?
SIRI Law LLP is based in Hyderabad and can discuss matters from elsewhere in India and cross-border issues through online consultations where appropriate. Where local representation is required in another jurisdiction, appropriately qualified local counsel may be needed.
Consultation by arrangement
Tell us what you are facing.
High level is fine. We check conflicts, tell you honestly whether we can help, and what it would cost. You decide, with no pressure.
- Call+91 79819 12046
- WhatsAppMessage us on WhatsApp
- Emailinfo@sirilawllp.com
- HoursMon–Sat, 9:30 AM–7:00 PM IST. For urgent matters, contact the firm to discuss next steps.
- Existing client?Message your named lead directly, or use the incident line for anything urgent.
Thank you. We have your enquiry.
A member of our team will be in touch within one working day. For anything urgent, call +91 79819 12046.
Visit us
Contact us in Hyderabad.
HITEC City, Madhapur, Hyderabad, Telangana 500081
Meetings by appointment. Online consultation availability can be discussed when you contact the firm.

