01
Applicability and processing grounds
Identify processing activities, roles, territorial reach, and the permitted purpose for each personal data flow.
India | DPDP Act advisory
DPDP Act readiness for India's technology businesses.
Practical privacy advice for product, legal and security teams building accountable technology in India.
Gap assessment preview
Indicative scopeIllustrative review areas
01Mapped
Processing inventory
Key data flows and roles02Review
Notice and consent
Collection journeys03Priority
Incident readiness
Response evidenceOutput
Prioritised DPDP Act action planTrusted by
Statutory lifecycle
Advice organised around the decisions the Act requires.
A DPDP Act programme should make duties actionable: identify the processing, choose the right control, and leave usable evidence.
02
Notice, consent and legitimate uses
Build the notices, consent journeys, withdrawal controls, and documented legitimate-use decisions that product teams can run.
03
Safeguards and breach readiness
Translate data fiduciary duties into vendor, access, retention, security, and incident-response routines.
04
Children and significant fiduciaries
Assess heightened duties for children and Significant Data Fiduciaries under Sections 9 and 10 of the Act.
05
Rights and grievance handling
Design operational workflows to receive, verify, answer, and evidence data principal requests and grievances.
Engagements
Starting points for scoped privacy work.
The final fee depends on systems, timelines, roles and deliverables confirmed in the initial consultation.
Priority starting point
Gap assessment
starting from
INR 50,000
A focused gap assessment for an organisation establishing its first DPDP Act action plan.
Discuss a gap assessmentImplementation engagement
starting from
INR 2,50,000
A structured implementation scope for growing businesses preparing operating controls and documentation.
Enterprise and ongoing advisory
scoped engagement
Custom
Multi-entity, high-volume, or continuing privacy support with a proposal after consultation.
Method
A clear operating path for privacy risk.
The work is designed to produce choices, accountable owners and records your teams can continue using.
01
Diagnose
Map the data, products, vendors, and deadlines that create the immediate DPDP Act question.
02
Prioritise
Separate mandatory controls from later maturity work and give teams an executable sequence.
03
Implement
Prepare documents, workflows, training, and records that withstand internal and external scrutiny.
Founder-led practice
Data>Nuance India
Kaustubh Shakkarwar
Founder, Data>Nuance
Certified Data Protection Officer (CDPO)
Legal, privacy and technical judgement in one advisory model.
Kaustubh Shakkarwar is a technology-focused legal professional specialising in data protection, privacy and emerging regulatory frameworks. As a Certified Data Protection Officer (CDPO), his practice focuses on translating obligations into practical decisions and governance routines.
About Data>NuanceRecognition
Privacy work presented with evidence.
Recognition currently displayed by Data>Nuance, alongside a practice built for operational implementation.
CIO Magazine recognition, 2024
Named among the 10 Most Promising Data Protection and Privacy Service Providers.
Innovative Zone recognition, 2025
Recognised as a trusted privacy compliance solutions company.
ET Young Industry Leader 2025
Excellence in Data Privacy.
In the media
Published thinking beyond our own library.
Selected externally published articles authored by Data>Nuance and its founder.
Publication 1 of 5
Insights
Briefings for DPDP Act decisions already moving.
Practical guides and regulatory analysis for product, legal, security and compliance teams.
GuideDPDP Act
DPDP Act readiness for technology businesses
A practical first-pass framework for product, legal and security teams deciding what to document and implement first.
GuideDPDP Act
DPDP Act implementation roadmap for Indian businesses
A practical roadmap for Indian businesses turning DPDP Act obligations into owners, workflows, records and implementation controls.
GuideDPDP Act
DPDP applicability assessment for Indian organisations
How Indian organisations should test whether a workflow falls within the DPDP Act and document the resulting controls.
Start with context
Book a focused DPDP Act consultation.
Bring an upcoming launch, notice review, data mapping question, incident readiness issue or implementation deadline. We will help identify the right next step.