...

frejun.com

160 Series Numbers for EdTech and E-Learning Companies: Do You Need One?

160 series EdTech India

AI Summary: This article examines whether EdTech platforms and e-learning companies in India qualify for 160 series numbers. DoT introduced the 160xxxxxxx series on 30 May 2024 (PRID 2022249). The series covers only entities regulated by RBI, SEBI, PFRDA, IRDAI, and government bodies. EdTech platforms outside those four regulated categories do not qualify today. However, TCCCPR 2018 and its Second Amendment dated 12 February 2025 govern every outbound voice call these platforms make. FreJun helps EdTech platforms build compliant outbound architectures covering DLT registration, template management, and routing segregation.

Key Facts at a Glance

ItemDetail
Regulation governing outbound callsTCCCPR, 2018 (Second Amendment, 12 Feb 2025)
Governing bodiesTRAI / DoT
160 series eligibility (current mandate)RBI, SEBI, PFRDA, IRDAI-regulated entities and government bodies only
EdTech 160 series eligibility (current)Not eligible unless regulated by the four sectoral regulators above
Applicable number series for EdTech promotional calls140xxxxxxx (registered telemarketer)
First-violation TCCCPR penaltyRs 2,00,000
Blacklist trigger5 complaints in any rolling 10-day period
Primary sourceDoT Press Release, 30 May 2024 (PRID 2022249)

  • The 160 series is open only to entities regulated by RBI, SEBI, PFRDA, IRDAI, and government bodies. EdTech companies outside these categories do not qualify today.
  • EdTech platforms must comply with TCCCPR 2018 and its Second Amendment dated 12 February 2025. This covers OTP calls, course reminders, and fee alerts.
  • Promotional and sales outreach must use the 140 series as a registered telemarketer. Standard 10-digit mobile numbers are not compliant for commercial outreach.
  • TCCCPR penalties start at Rs 2,00,000 per instance and scale to Rs 10,00,000. A one-year telecom blacklist is the most severe operational consequence.
  • FreJun supports EdTech compliance through DLT registration, template management, routing segregation, and CDR logging across 140 series campaigns.

In this article:

  1. Key Facts at a Glance
  2. Quick Answer: Does an EdTech Platform Need a 160 Series Number?
  3. What Is the 160 Series and How Does It Work?
  4. Who Is Eligible for a 160 Series Number in India?
  5. What Types of Calls Do EdTech Platforms Typically Make?
  6. How Does TCCCPR 2018 Apply to EdTech Outbound Calling?
  7. How Should EdTech Platforms Use the 140 Series Correctly?
  8. What Is DLT Registration and Why Does Every EdTech Platform Need It?
  9. What Are the Penalties for Non-Compliance?
  10. How FreJun Helps EdTech Platforms Build Compliant Calling Architectures
  11. Frequently Asked Questions
  12. Key Takeaways
  13. Compliance Disclaimer
  14. References and Sources

Quick Answer: Most EdTech and e-learning companies in India do not qualify for a 160 series number today. Eligibility is limited to entities regulated by RBI, SEBI, PFRDA, or IRDAI. However, every EdTech platform making outbound voice calls must comply with TCCCPR 2018. Platforms must register on the DLT platform and use 140 series numbers for promotional outreach.

Quick Answer: Does an EdTech Platform Need a 160 Series Number?

No, not under the current framework. The 160 series is restricted to Principal Entities regulated by RBI, SEBI, PFRDA, IRDAI, and government organisations. An EdTech platform without an NBFC licence, insurance intermediary registration, or similar financial authorisation falls outside the eligibility boundary.

That said, the question goes beyond 160 series eligibility. EdTech platforms make large outbound voice call volumes covering OTP delivery, course updates, fee reminders, counsellor follow-ups, and admission advisories. Each call type carries distinct compliance obligations. TCCCPR 2018 and the Second Amendment dated 12 February 2025 govern all of them. Ignoring TCCCPR because the 160 mandate does not apply is a compliance mistake that regularly leads to blacklisting.

Definition: 160 Series (160xxxxxxx): A dedicated numbering series DoT allocated exclusively for service and transactional voice calls. DoT mandated this in the Press Release dated 30 May 2024 (PRID 2022249). TSPs assign these numbers only to verified Principal Entities. Consumers can then distinguish genuine service calls from fraudulent ones.

Get Legal Guidance

FreJun’s compliance team works with EdTech platforms on TCCCPR, DLT registration, and outbound call architecture. Clarifying your exact obligations takes a 30-minute conversation, not months of internal research.

What Is the 160 Series and How Does It Work?

The 160 series is India’s dedicated numbering range for service and transactional voice calls. DoT introduced it on 30 May 2024 (PRID 2022249) to close a specific fraud gap. Before the 160 series, RBI, SEBI, PFRDA, and IRDAI entities had no dedicated number range. They used standard 10-digit mobile numbers for service calls instead. Consumers ignored those calls because 140 series spam had eroded all trust. Fraudsters then exploited the same 10-digit format to impersonate banks and financial institutions.

How the 160 Series Operates in Practice

The 160 series works on a visual-trust principle. When a consumer sees a number beginning with 160, they immediately recognise it as a verified service call. The series signals a genuine Principal Entity is calling. Notably, the sub-prefix 1601xxxxxxx is reserved for financial-sector entities regulated by RBI, SEBI, PFRDA, and IRDAI. This adds a second identification layer for consumers. Specifically, TSPs must verify each entity before assigning a number. The entity must then commit to using that allocation strictly for service and transactional calls under TCCCPR, 2018. In short, the 160 series is a regulated privilege, not a commercial product any business can buy.

Additionally, every call from a 160 series number must use a pre-registered template on the Distributed Ledger Technology (DLT) platform. Notably, each template carries a unique Template ID that travels in the call signalling. Consequently, regulators can trace an end-to-end audit trail from the originating Principal Entity to the called consumer at any time.

160 Series vs 140 Series: The Core Distinction

Originally, the 140 series covered all commercial calls, mixing promotional traffic with transactional calls. Over time, consumers began rejecting every 140 call as spam. Crucially, the 160 series corrects this by separating purpose at the numbering layer itself. Specifically, 140 series numbers now cover only promotional and telemarketing calls. Meanwhile, 160 series numbers cover only service and transactional calls. Neither series can cross into the other’s purpose without triggering TCCCPR penalties.

Crucially, this segregation is a technical requirement, not merely a policy statement. The same dialer instance cannot serve both series from the same number pool. For your compliance team, the implication is clear. Promotional calls and OTP calls must use separate number series. They also need separate routing infrastructure.

Who Is Eligible for a 160 Series Number in India?

In practice, eligibility for a 160 series number is limited to specific entity categories. Specifically, only Principal Entities (PEs) within the following groups may apply to a TSP for allocation.

  • RBI-regulated entities: banks, NBFCs, payment aggregators, and other RBI-licensed financial institutions.
  • SEBI-regulated entities: mutual funds, AMCs, qualified stockbrokers (QSBs), portfolio managers, and SEBI-registered investment advisers.
  • PFRDA-regulated entities: pension funds and associated intermediaries.
  • IRDAI-regulated entities: insurance companies and insurance intermediaries.
  • Government organisations: central and state government bodies making official service calls.
160 series EdTech India

Why Most EdTech Platforms Fall Outside This List

Importantly, a standard EdTech platform, whether a K-12 tutoring app, a test-prep company, an upskilling platform, or an online certification provider, holds no licence from any of the four financial sector regulators. Consequently, it does not qualify for a 160 series allocation. The DoT Press Release dated 30 May 2024 (PRID 2022249) confines the 160 series to BFSI and government bodies. TRAI confirmed this in the Direction dated 19 November 2025 (PRID 2191647). A follow-up Direction dated 16 December 2025 (PRID 2205350) reaffirmed the same scope. Notably, none of these documents extend eligibility to the education sector. None extends eligibility to the education sector.

However, one important exception exists. An EdTech company holding a SEBI investment adviser registration may hold partial eligibility. The same applies to companies with an NBFC licence for student loans or an IRDAI registration for student insurance products. Importantly, this applies only to calls within the regulated activity, not the education business. In that case, the entity needs separate routing: education-related calls stay outside 160 eligibility, while regulated-financial-service calls fall within it. Legal counsel should verify the scope of any hybrid eligibility before the entity applies to a TSP.

In my practice advising telecom-sector clients, I have seen EdTech-fintech hybrids attempt blanket 160 series applications. They try to cover their entire call volume under a single allocation. TSPs reject this approach. The eligibility check is entity-type-specific, not company-wide. Moreover, the allocation declaration binds the entity. It must use that number only for calls within the eligible regulated activity.

What Types of Calls Do EdTech Platforms Typically Make?

Indeed, understanding call classification is the first step in building a compliant outbound architecture. EdTech platforms typically make four categories of outbound voice calls, and each category carries a different compliance treatment under TCCCPR.

OTP and Authentication Calls

Specifically, OTP delivery for sign-ups, login, payment verification, and certificate issuance qualifies as a transactional call under TCCCPR. Specifically, these calls respond to a customer-initiated action. Under the TCCCPR Second Amendment dated 12 February 2025, a transactional call must reach the customer within 30 minutes. The 30-minute clock starts at the triggering customer event. Beyond that window, the call becomes a service call and requires a different consent basis. Most EdTech platforms process high OTP volumes. India had over 750 million mobile internet users in 2024 (Ken Research), and the learner base keeps growing. Routing OTP calls through unregistered numbers or without DLT templates causes immediate network-level blocking by TSPs.

Course, Schedule, and Admission Service Calls

Calls confirming batch timings qualify as service calls. So do calls notifying learners about cancellations or reminding enrolled students about upcoming assessments. Under TCCCPR, a service call completes or confirms a transaction the recipient already consented to. It can also deliver safety or product-related information about something the recipient purchased. A call to a paid learner about their enrolled course clearly fits. Implicit consent for such calls stays valid for the duration of the learner’s active subscription.

Furthermore, fee collection calls to existing learners can qualify as service calls, provided the script contains no promotional content. Adding any cross-sell or upsell element converts the call from service to commercial. At that point, the call requires 140 series routing and a separate DND-compliant consent basis.

Promotional and Lead-Generation Calls

Specifically, calls to prospective learners for course counselling, admission pitches, or promotional discounts are commercial calls. EMI financing offers also fall into this category. These calls must route through a registered 140 series telemarketer number, not a standard 10-digit mobile number. Additionally, the called number must pass through NDND scrubbing before each dial. Industry reports indicate roughly 147 million spam complaints reached TRAI in 2024, and education-sector callers contributed a significant share. TRAI monitors complaint rates closely. Five valid complaints in any rolling 10-day period triggers usage caps and potential blacklisting.

Payment Reminder and EMI Calls

EdTech platforms with instalment-based fee structures make payment reminder calls that sit at the service-commercial boundary. Notably, a reminder about an upcoming EMI due date is a service call, provided the script stays factual. Conversely, a call promoting a fee-financing upgrade to a prospective customer is a commercial call. This distinction matters. Misrouting a commercial call through a service-call template is itself a TCCCPR violation. It stands separate from any DND breach.

How Does TCCCPR 2018 Apply to EdTech Outbound Calling?

TCCCPR, the Telecom Commercial Communications Customer Preference Regulations, 2018, applies to every entity making commercial communications in India. EdTech platforms are fully within its scope. The Second Amendment dated 12 February 2025 tightened several provisions that directly affect education-sector outbound practices.

Definition: TCCCPR 2018 (Telecom Commercial Communications Customer Preference Regulations): India’s primary regulatory framework for all commercial voice calls and SMS, administered by TRAI. It covers DND protections, PE registration, DLT template obligations, consent rules, and penalty structures for every sender of commercial communications.

Notably, the Second Amendment, 2025 introduced three consent rules EdTech platforms must implement immediately. First, implicit consent for service calls is valid only while the platform’s contract with the learner stays active. Once the subscription lapses, consent lapses too. Once a subscription lapses, implicit consent lapses too. Second, explicit consent for communications without a continuing contractual relationship is valid for just 7 days from the grant date. Third, after a subscriber opts out, the entity cannot contact that person again for 90 days on the same purpose.

Additionally, platforms must disclose the use of auto-dialers and robocalls at the start of each call. Consent capture must align with the Digital Consent Acquisition (DCA) framework on the DLT platform. For counsellor outreach campaigns, the implication is direct. A lead database older than 7 days, without refreshed consent, cannot lawfully receive promotional calls.

Template Registration Obligations

Specifically, every voice script needs pre-registration as a content template on the DLT platform. Consequently, no call goes out before that step completes. This includes the IVR opener, the agent introduction line, and the substantive message body. Each template receives a unique Template ID that must travel in the call signalling. Calling with an unregistered, outdated, or blacklisted template is a violation, even if the originating number is itself valid. Notably, EdTech platforms running A/B tests on call scripts must register each variant separately. Running an unapproved variant, even briefly, creates TCCCPR exposure.

Permitted Calling Hours for EdTech Outbound Calls

Under TCCCPR, commercial and telemarketing calls are permitted between 9:00 am and 9:00 pm only. In contrast, service and transactional calls do not carry the same statutory window restriction. However, calling learners outside the 9:00 am to 9:00 pm window for counselling or promotional purposes carries real complaint risk. Even one cluster of complaints can push an entity toward the 5-complaint blacklisting threshold. Compliance teams should configure all commercial dialers to enforce the 9:00 am to 9:00 pm window. Treat this as a non-negotiable baseline control.

How Should EdTech Platforms Use the 140 Series Correctly?

Therefore, EdTech platforms making promotional calls must operate as registered telemarketers on the 140 series. A company using standard 10-digit mobile numbers for commercial outreach faces Unregistered Telemarketer (UTM) classification under TCCCPR. This is common in EdTech counselling teams, and the consequences are severe. Specifically, consequences for UTM status escalate from a first-instance warning to usage caps and ultimately to full telecom resource disconnection.

Registering as a Principal Entity on DLT

To use a 140 series number lawfully, an EdTech company must register as a Principal Entity (PE) on the DLT platform. Notably, the process runs in three steps. First, register the company as a PE with one approved DLT platform operated by Jio, Airtel, Vi, or BSNL. Second, register each call script as an approved template with the exact wording of every disclosure. Third, link each approved template to the specific outbound campaign. Template approvals typically take 2 to 5 business days for first-time registrants.

Moreover, the entity must scrub its outbound dial lists against the NDND registry before every campaign run. Numbers on the NDND list cannot receive commercial calls. In practice, skipping NDND scrubbing is the single most common compliance error in EdTech outbound teams. It directly increases the complaint count that TRAI monitors for blacklisting purposes.

The Routing Segregation Obligation

Indeed, the routing segregation requirement is frequently misunderstood. EdTech platforms cannot route OTP calls and promotional calls through the same dialer instance or number pool. Importantly, the boundary must exist at the system level, not merely in a policy document. Regulators have consistently ruled that written policies without enforced routing logic do not satisfy the compliance standard. In practice, a single contact centre infrastructure needs separate outbound trunks: one for service-class traffic and one for commercial traffic.

What Is DLT Registration and Why Does Every EdTech Platform Need It?

Specifically, DLT, or Distributed Ledger Technology, is the regulatory infrastructure TRAI uses to create accountability across all commercial communications. Consequently, every Principal Entity sending commercial communications, whether SMS or voice, must register on a DLT platform. Indeed, for EdTech platforms, this registration is mandatory, not optional. Voice call workflows on the 140 series must sit on the DLT platform. Every commercial call then logs and traces automatically.

The Three-Step DLT Registration Process

First, the EdTech company registers itself as a Principal Entity with one DLT platform operated by a major TSP. Second, the company registers its sender headers, the numerical or alphanumeric ID appearing on the called party’s screen. Third, the company registers each call template, including every disclosure, the call purpose classification, and the consent basis. Each template then receives a unique Template ID. Importantly, all three steps must complete before any commercial campaign launches. Without DLT registration, Jio, Airtel, and Vi block outbound calls at the network level. The calls simply never connect.

In practice, the clients I work with consistently report that DLT template registration takes the longest. First-time registrants typically need 2 to 3 weeks, often because of form-field rejections or purpose misclassification flags. Building this lead time into every campaign launch plan is essential, especially during EdTech admission season when timelines are tight.

Record-Keeping Obligations Alongside DLT

Beyond registration, EdTech platforms must retain full Call Detail Records (CDRs). They must also map Template IDs to each CDR entry, preserve consent records, and maintain complaint logs with resolution trails. The Digital Personal Data Protection Act, 2023 (DPDP Act) requires Data Fiduciaries to demonstrate a lawful processing basis on demand. An outbound operation that cannot produce consent records faces DPDP Act penalties. These stack on top of any TCCCPR action for the same conduct.

What Are the Penalties for Non-Compliance?

Notably, the penalty structure for TCCCPR non-compliance is multi-layered. A single non-compliant calling pattern can attract simultaneous action from telecom regulators, data protection authorities, and consumer forums. EdTech platforms must understand that each regulator acts independently of the others.

TCCCPR Financial Penalties

Specifically, under the TCCCPR Second Amendment, 2025, TRAI applies graded per-instance penalties. The first violation attracts Rs 2,00,000. The second attracts Rs 5,00,000. The third and each subsequent violation attracts Rs 10,00,000. These amounts apply separately for registered and unregistered senders. They also stack on top of any penalties for invalid complaint closure or other procedural failures.

Service Suspension and the Blacklist Consequence

In practice, service suspension is far more disruptive than financial penalties. Specifically, on the first violation, TRAI bars outgoing services on all the sender’s telecom resources for 15 days. On subsequent violations, TRAI disconnects all resources, including PRI and SIP trunks, across all TSPs for one year. The complaint threshold now stands at just 5 valid complaints in any rolling 10-day period. For an EdTech platform, a one-year blackout means no OTP delivery, no confirmation calls, and no outbound sales. Inbound customer service stops too. The cost of blacklisting dwarfs the cost of any compliance programme. The cost of blacklisting far exceeds the cost of any compliance programme.

Unregistered Telemarketer Treatment

Therefore, EdTech platforms making commercial calls from 10-digit mobile numbers without DLT registration face Unregistered Telemarketer (UTM) classification. Specifically, the enforcement path starts with a first-instance warning. Next, a usage cap of 20 outgoing voice calls per day applies for six months. Finally, the third violation triggers disconnection of all telecom resources. In practice, most EdTech counsellor teams run hundreds of calls per day per agent. A 20-call daily cap makes outbound sales operationally impossible.

DPDP Act, 2023 Penalties

Furthermore, where outbound calling misuse involves a data protection breach, for example calling without a lawful basis or ignoring opt-outs, the DPDP Act, 2023 empowers the Data Protection Board to act. Penalties reach Rs 250 crore for failing to maintain reasonable security safeguards. A failure to notify a personal data breach attracts up to Rs 200 crore separately. Notably, these penalties apply independently of any TCCCPR action arising from the same conduct.

160 series EdTech India

How FreJun Helps EdTech Platforms Build Compliant Calling Architectures

Importantly, FreJun’s platform handles the technical compliance layer so EdTech legal and operations teams can focus on substantive policy decisions. Specifically, FreJun manages DLT template registration and CDR logging. It also handles routing segregation and DND scrubbing across the three compliance layers relevant to EdTech outbound calling.

Routing Segregation and Number Series Management

Specifically, FreJun enforces technical segregation between service-class traffic and commercial traffic at the dialer level. Consequently, OTP calls and course-confirmation calls route through separate trunks from promotional counsellor outreach. Consequently, the routing logic TCCCPR requires is system-enforced, not merely policy-stated. Additionally, FreJun integrates with HubSpot, Zoho, Salesforce, and LeadSquared. Consent records and call logs map directly to learner profiles in the existing CRM stack.

DLT Registration Support and Template Management

Additionally, FreJun’s compliance team guides EdTech Principal Entities through DLT registration, covering header submission, template drafting, purpose classification, and the TSP submission workflow. For platforms running multiple campaign types, FreJun manages the full template library, tracking approval status, expiry dates, and blacklisting flags. This support matters most during admission season. EdTech platforms launch several campaign variants on short timelines, and template rejections create costly delays.

Talk to FreJun’s Legal Team

Most EdTech platforms run non-compliant outbound architectures without knowing it. FreJun’s team will map your call types and check your DLT registration gaps. Next, they identify the routing changes needed to stay off TRAI’s radar. The conversation takes 30 minutes and can prevent a one-year operational blackout.

Frequently Asked Questions

160 series vs 140 series: what is the difference for an EdTech company?

The 160 series covers service and transactional voice calls by entities regulated by RBI, SEBI, PFRDA, or IRDAI. EdTech platforms without such a regulatory licence do not qualify for 160 series allocation. The 140 series covers promotional and telemarketing calls by registered telemarketers, which is the lawful route for EdTech outbound counselling and admissions campaigns.

Does an EdTech company making OTP calls need to register on DLT?

Yes, registration is mandatory. Every entity sending commercial communications in India must register as a Principal Entity on a DLT platform. Without registration, Jio, Airtel, Vi, and BSNL block commercial calls at the network level. Additionally, every call script must carry an approved Template ID before any outbound campaign can launch.

What is the penalty for an EdTech company making calls from a standard 10-digit mobile number?

Unregistered commercial calls from 10-digit numbers result in UTM classification under TCCCPR. Penalties start with a first-instance warning, escalate to a 20-call-per-day usage cap for six months, and culminate in full telecom resource disconnection on the third violation. Financial penalties start at Rs 2,00,000 per instance and scale to Rs 10,00,000.

How does an EdTech company apply for a 140 series number?

First, the company registers as a Principal Entity on a DLT platform operated by a TSP such as Jio, Airtel, Vi, or BSNL. Next, it registers call headers and templates. Subsequently, it applies to the TSP for 140 series number allocation. The full process typically takes 3 to 6 weeks for a first-time applicant, so build that lead time into every campaign plan.

Can a fee reminder call to an existing learner come from a 10-digit mobile number?

No. A fee reminder call to an existing learner is a commercial communication under TCCCPR, even where the learner holds an active subscription. Such calls must use a DLT-registered sender ID with an approved template. Routing them through a standard 10-digit mobile number, such as an agent’s personal SIM, exposes the entity to UTM classification, complaint filing, and network-level blocking.

Could EdTech companies become eligible for 160 series numbers in the future?

Possibly. The current mandate covers only BFSI and government entities. However, TRAI has already extended the framework twice, adding IRDAI entities in December 2025 after the November 2025 Direction for RBI, SEBI, and PFRDA entities. If TRAI expands the framework to include high-volume transactional callers in education or healthcare, EdTech eligibility could change. Monitor official PRID updates at pib.gov.in for any new directions.

Is a counsellor calling a prospect from a company SIM a TCCCPR violation?

Yes, if the company lacks DLT registration and has not scrubbed the number against NDND. TCCCPR binds the entity, not just the number series. Promotional outreach from any number, personal SIM or company SIM, without registered templates and DND compliance is a violation. The call classification depends on purpose and registration status, not on whose SIM is used.

Key Takeaways

  • EdTech platforms currently do not qualify for 160 series numbers. The exception is where the platform also holds an RBI, SEBI, PFRDA, or IRDAI licence for a regulated financial product.
  • All outbound voice calls by EdTech platforms fall within TCCCPR 2018 and the Second Amendment dated 12 February 2025. This covers OTPs, course service calls, fee reminders, and counsellor outreach.
  • Promotional calls must route through the 140 series as a registered telemarketer with DLT-approved templates. Using 10-digit mobile numbers for commercial outreach constitutes UTM status.
  • The TCCCPR blacklist is the highest operational risk for high-volume EdTech callers. Just 5 complaints in 10 days triggers one year of full telecom disconnection.
  • Technical routing segregation between service traffic and promotional traffic is a mandatory compliance requirement, not a best practice.
  • India’s EdTech market reached approximately USD 3.63 billion in 2025 (IMARC Group) and is growing at 27.94% CAGR. Outbound calling regulation will tighten further as the sector scales.
  • FreJun provides EdTech platforms with compliant outbound calling infrastructure, including DLT registration support, routing segregation, CDR logging, and CRM integration.

For Any Questions Reach Out to Our Legal Team

You have seen what the regulations require. Now verify whether your current setup meets them. FreJun’s legal team will map your call types, confirm your DLT status, and identify the gaps before TRAI does. The check takes 30 minutes.

Compliance Disclaimer

Disclaimer: This article is published for informational purposes only and represents FreJun’s understanding of the relevant legal and regulatory position based on its own independent research and interpretation of publicly available materials. It should not be construed as legal advice, legal opinion, or regulatory guidance. Readers should seek independent legal counsel before acting on this information. Consulting the appropriate regulatory authorities directly is also advisable. Reasonable efforts have gone into ensuring accuracy. However, laws, regulations, and enforcement positions evolve and vary based on specific facts and circumstances. FreJun does not warrant the contents are free from inaccuracies or inadvertent errors. FreJun accepts no liability for any reliance placed on this article.

References and Sources

About the Author: Nimish Gavali is a Legal and Compliance Analyst and appointed Data Protection Officer (DPO) with prior experience practising before the Hon’ble Bombay High Court. Having transitioned into a corporate role, he advises on telecom regulation, digital compliance, data governance, and customer communication frameworks. His work spans TRAI regulations, DoT licensing, the TCCCPR 2018 and related amendments, DLT registration, and the 160 and 140 series numbering framework, with a focus on BFSI and communication platforms navigating compliant customer-outreach architectures. Prior to his in-house role, he worked on regulatory, civil, and commercial matters before the Bombay High Court. He holds an LL.B. from Government Law College, Mumbai, an LL.M. in Business and Corporate Law, and a Diploma in Cyber Laws. Connect on LinkedIn