ChecklistSDF readiness
DPO readiness checklist under the DPDP Act
A practical DPDP checklist for DPO readiness, covering reporting lines, role charter, request intake, evidence access and product-change controls.
Insights
DPDP Act guidance for decisions in motion.
Guides, regulatory updates and practical checklists for Indian product, legal, compliance and security teams.
GuideSDF readiness
Significant Data Fiduciary readiness under the DPDP Act
A practical DPDP guide to Significant Data Fiduciary readiness, covering governance, DPO planning, DPIA workflows, audit evidence and board reporting.
ChecklistChildren's data
Product launch checklist for children's data under DPDP
A practical DPDP launch checklist for products handling children's data, covering age states, notices, vendors, testing, support and evidence records.
GuideChildren's data
Vendor controls for children's personal data
A practical DPDP guide to reviewing vendors, SDKs, contracts, support tools and data pipelines that process children's personal data.
GuideChildren's data
Behavioural tracking restrictions for children's data
A practical DPDP guide to reviewing behavioural tracking, profiling, analytics, advertising SDKs and experiments for child-user data in India.
GuideChildren's data
Children's data risks in gaming and social products
A practical DPDP readiness guide for gaming and social products handling children's data, covering accounts, chat, rewards, tracking, vendors and support.
GuideChildren's data
Children's data checks for edtech products in India
A practical DPDP readiness guide for edtech products handling children's data across student accounts, schools, parents, vendors and support flows.
GuideChildren's data
Age gating design under the DPDP Act
A practical guide to age gating design under the DPDP Act, covering age signals, product triggers, parent flows, feature controls and evidence records.
GuideChildren's data
Verifiable parental consent workflow for Indian apps
A practical workflow for Indian apps to design verifiable parental consent, age triggers, parent journeys, verification methods and evidence records.
GuideChildren's data
Children's data readiness under the DPDP Act
A practical readiness guide for children's data under the DPDP Act, covering age assessment, parental consent, product features and evidence records.
GuideData principal rights
Escalation matrix for privacy grievances in India
A practical escalation matrix for privacy grievances in India, covering intake, risk triggers, owners, response levels and evidence records.
GuideData principal rights
Customer support playbook for DPDP rights requests
A practical DPDP rights request playbook for customer support teams covering intake, triage, verification, escalation and closure evidence.
GuideData principal rights
Data principal request register under the DPDP Act
A practical guide to building a DPDP-ready data principal request register for intake, verification, ownership, evidence and closure tracking.
GuideData principal rights
Data deletion workflow for SaaS and app teams in India
A practical deletion workflow for SaaS and app teams handling DPDP Act rights requests, retention exceptions, vendors, logs and evidence records.
ChecklistDPDP Implementation
Grievance redressal workflow under the DPDP Act
A practical DPDP grievance redressal workflow for Indian teams, covering intake, identity checks, escalation, response records and closure evidence.
ChecklistDPDP Implementation
Identity verification before answering data principal requests
A practical checklist for verifying identity before DPDP rights responses, with request tiers, escalation rules, refusal language and audit records.
ChecklistDPDP Implementation
Data access request process for Indian businesses
A practical checklist for handling DPDP data access requests, covering intake, identity checks, data-source searches, response packages and records.
ChecklistDPDP Implementation
Nomination right under the DPDP Act for product teams
A practical checklist for implementing the DPDP nomination right in account settings, rights workflows, support processes and verification paths.
ChecklistData principal rights
Correction and erasure request handling under the DPDP Act
A practical checklist for Indian teams handling correction and erasure requests, identity checks, retention exceptions, vendors and evidence records.
ChecklistData principal rights
Data principal rights workflow under the DPDP Act
A practical workflow for Indian teams handling data principal rights requests, identity checks, system searches, vendor actions and evidence records.
ChecklistNotice and consent
Privacy notice version control for DPDP compliance
A practical checklist for Indian teams managing privacy notice versions, approvals, consent records and archives for DPDP readiness.
ChecklistNotice and consent
Multilingual privacy notice review under the DPDP Act
A practical review model for Indian teams preparing multilingual privacy notices, consent journeys, version records and support workflows under the DPDP Act.
ChecklistNotice and consent
Employee notice and consent under the DPDP Act
A practical checklist for Indian HR, legal and security teams preparing employee notices, consent records and vendor controls under the DPDP Act.
ChecklistNotice and consent
Marketing consent under the DPDP Act
A practical guide for Indian growth, sales and legal teams reviewing marketing consent, suppression workflows and evidence under the DPDP Act.
ChecklistNotice and consent
DPDP notice checklist for onboarding flows
A practical checklist for product, legal and engineering teams reviewing DPDP notices in onboarding flows before collecting personal data.
ChecklistNotice and consent
Layered privacy notices for Indian apps and websites
A practical guide for designing layered privacy notices for Indian apps and websites under the DPDP Act and DPDP Rules 2025.
ChecklistNotice and consent
Consent manager readiness under the DPDP framework
A practical readiness guide for Indian organisations planning consent manager integrations, governance, records and operational handoffs.
ChecklistNotice and consent
Consent records under the DPDP Act
A practical guide to building consent records under the DPDP Act for product, legal, marketing and compliance teams in India.
ChecklistNotice and consent
Legitimate uses under the DPDP Act for business teams
A practical guide for Indian business teams deciding when a DPDP Act legitimate use may apply and how to record the decision responsibly.
ChecklistNotice and consent
Consent withdrawal workflow under the DPDP Act
A practical checklist for Indian teams designing consent withdrawal workflows, records, ownership and follow-up actions under the DPDP Act.
ChecklistNotice and consent
Consent journey design under the DPDP Act
A practical guide to designing DPDP consent journeys for Indian apps, websites and digital products with records and withdrawal paths.
ChecklistNotice and consent
Notice under the DPDP Act for digital products
A practical checklist for DPDP notices in Indian digital products, apps, onboarding flows, dashboards and user journeys.
GuideDPDP Act
DPDP implementation mistakes Indian companies should avoid
A practical guide to common DPDP implementation mistakes Indian companies should avoid across data, vendors, notices and evidence.
GuideDPDP Act
DPDP readiness after a product or vendor change
A practical guide to refreshing DPDP readiness after product, vendor, analytics, support or internal workflow changes.
GuideDPDP Act
DPDP Act operating model for legal and security teams
A practical DPDP operating model for legal, security, product and business teams that need owners, records and escalation paths.
GuideDPDP Act
DPDP compliance evidence records for Indian businesses
A practical guide to DPDP compliance evidence records for Indian businesses building privacy governance and audit readiness.
GuideDPDP Act
DPDP Act readiness for startups preparing for funding
A practical DPDP readiness guide for Indian startups preparing for investor diligence, enterprise sales or funding rounds.
GuideDPDP Act
DPDP implementation plan for multi-entity groups
A practical DPDP implementation plan for Indian groups operating across entities, brands, products, systems and vendors.
GuideDPDP Act
DPDP Act documentation pack for internal teams
A practical DPDP documentation pack for Indian teams that need implementation records, owners, workflows and governance evidence.
GuideDPDP Act
Personal data inventory under the DPDP Act
A practical guide to building a personal data inventory for DPDP implementation across products, teams, vendors and records.
GuideDPDP Act
DPDP compliance gap assessment for growing companies
A practical DPDP gap assessment guide for growing Indian companies balancing product speed, vendors, governance and evidence.
GuideDPDP Act
Purpose mapping for DPDP Act implementation
A source-led guide to purpose mapping under the DPDP Act for Indian teams designing notices, controls and evidence records.
GuideDPDP Act
DPDP readiness checklist before launching a new product
A practical pre-launch DPDP checklist for Indian product, legal, security and growth teams before a new product goes live.
GuideDPDP Act
DPDP applicability assessment for Indian organisations
How Indian organisations should test whether a workflow falls within the DPDP Act and document the resulting controls.
GuideDPDP Act
Data fiduciary obligations under the DPDP Act
A practical guide to converting Data Fiduciary duties under the DPDP Act into operating controls and evidence records.
GuideDPDP Act
DPDP Act implementation roadmap for Indian businesses
A practical roadmap for Indian businesses turning DPDP Act obligations into owners, workflows, records and implementation controls.
GuideDPDP Act
DPDP Act readiness for technology businesses
A practical first-pass framework for product, legal and security teams deciding what to document and implement first.
ChecklistNotice and consent
Notice under Section 5 of the DPDP Act
What a Data Fiduciary should review before putting consent and notice experiences into production.
GuideHeightened duties
Children's data under Section 9 of the DPDP Act
Heightened duties for teams building products that may process a child's personal data.
GuideGovernance
Preparing for Significant Data Fiduciary duties
Section 10 readiness for organisations that may be notified as Significant Data Fiduciaries.
Regulatory updateIncident readiness
CERT-In directions and incident readiness
A concise operational view of incident reporting and log retention obligations relevant to security and privacy teams.
CommentaryLegal framework
Sensitive personal data: SPDI rules and the DPDP framework
How older SPDI terminology and the DPDP Act should be distinguished in current privacy assessments.
Start with context
Book a focused DPDP Act consultation.
Bring an upcoming launch, notice review, data mapping question, incident readiness issue or implementation deadline. We will help identify the right next step.