ChecklistVendor governance
Vendor offboarding and personal data deletion under DPDP
How Indian businesses can close vendor relationships cleanly, evidence deletion and reduce residual personal-data risk under the DPDP Act.
Insights
DPDP Act guidance for decisions in motion.
Guides, regulatory updates and practical checklists for Indian product, legal, compliance and security teams.
ChecklistVendor governance
International SaaS tools and DPDP vendor risk
A practical checklist for Indian teams reviewing international SaaS tools before personal data is shared under the DPDP Act.
ChecklistDPDP Compliance
Analytics tool review under the DPDP Act
A practical review guide for product analytics, web analytics and reporting tools that collect identifiers or behavioural data.
ChecklistDPDP Compliance
Marketing vendor privacy controls under the DPDP Act
A source-led checklist for reviewing agencies, campaign tools, pixels and enrichment vendors before customer data is used for marketing.
ChecklistDPDP Compliance
HR vendor privacy checklist under the DPDP Act
A practical checklist for reviewing payroll, recruitment, benefits and HR technology vendors before employee personal data is shared.
ChecklistProcessors and vendors
Data processing clauses for Indian customer contracts
A practical checklist for Indian businesses adding DPDP-ready data processing clauses to customer contracts and order forms.
ChecklistProcessors and vendors
Vendor due diligence before sharing personal data
A practical due-diligence model for Indian teams before personal data is shared with vendors, SaaS tools or processors.
ChecklistProcessors and vendors
Processor instructions under the DPDP Act
A practical checklist for Indian teams turning processor relationships into clear instructions, evidence and review controls.
ChecklistVendor privacy
Cloud service provider privacy checklist for Indian businesses
A practical checklist for Indian teams reviewing cloud providers, contracts, security evidence and DPDP-ready vendor governance.
ChecklistProcessors and vendor governance
Data processor contract checklist under the DPDP Act
A practical checklist for Indian businesses reviewing processor contracts, security safeguards, erasure duties and evidence under the DPDP Act.
ChecklistPrivacy operations
Personal data breach register for Indian businesses
A practical register structure for Indian teams recording personal data breach facts, decisions, evidence, notices and remediation under DPDP readiness work.
ChecklistIncident readiness
Breach tabletop exercise for DPDP readiness
A practical tabletop exercise model for Indian teams testing breach escalation, evidence, vendor response and DPDP readiness.
ChecklistSecurity safeguards
Security controls privacy teams should evidence under DPDP
A practical evidence checklist for privacy teams documenting security safeguards, logs, access controls and vendor oversight.
ChecklistIncident readiness
Vendor breach notification workflow under the DPDP Act
A practical workflow for Indian privacy, legal and security teams to get vendor breach notices fast, complete and usable.
ChecklistSecurity safeguards
Log retention and privacy incident evidence in India
A practical checklist for aligning privacy incident evidence, DPDP breach readiness and CERT-In log retention duties in India.
ChecklistSecurity and breach readiness
Privacy incident escalation playbook for Indian businesses
A practical escalation playbook for Indian teams handling privacy incidents, security alerts, evidence records and regulator-ready decisions.
ChecklistDPDP implementation
Personal data breach response under the DPDP Act
A practical breach-response checklist for Indian privacy, legal and security teams aligning DPDP Act duties with CERT-In incident evidence.
ChecklistDPDP implementation
Security safeguards under the DPDP Act
A practical checklist for Indian privacy, security and product teams turning DPDP security duties into evidence, owners and breach-ready controls.
ChecklistSDF readiness
DPO readiness checklist under the DPDP Act
A practical DPDP checklist for DPO readiness, covering reporting lines, role charter, request intake, evidence access and product-change controls.
ChecklistChildren's data
Product launch checklist for children's data under DPDP
A practical DPDP launch checklist for products handling children's data, covering age states, notices, vendors, testing, support and evidence records.
ChecklistData principal rights
Correction and erasure request handling under the DPDP Act
A practical checklist for Indian teams handling correction and erasure requests, identity checks, retention exceptions, vendors and evidence records.
ChecklistDPDP Implementation
Grievance redressal workflow under the DPDP Act
A practical DPDP grievance redressal workflow for Indian teams, covering intake, identity checks, escalation, response records and closure evidence.
ChecklistDPDP Implementation
Nomination right under the DPDP Act for product teams
A practical checklist for implementing the DPDP nomination right in account settings, rights workflows, support processes and verification paths.
ChecklistDPDP Implementation
Data access request process for Indian businesses
A practical checklist for handling DPDP data access requests, covering intake, identity checks, data-source searches, response packages and records.
ChecklistDPDP Implementation
Identity verification before answering data principal requests
A practical checklist for verifying identity before DPDP rights responses, with request tiers, escalation rules, refusal language and audit records.
ChecklistData principal rights
Data principal rights workflow under the DPDP Act
A practical workflow for Indian teams handling data principal rights requests, identity checks, system searches, vendor actions and evidence records.
ChecklistNotice and consent
Privacy notice version control for DPDP compliance
A practical checklist for Indian teams managing privacy notice versions, approvals, consent records and archives for DPDP readiness.
ChecklistNotice and consent
Multilingual privacy notice review under the DPDP Act
A practical review model for Indian teams preparing multilingual privacy notices, consent journeys, version records and support workflows under the DPDP Act.
ChecklistNotice and consent
Employee notice and consent under the DPDP Act
A practical checklist for Indian HR, legal and security teams preparing employee notices, consent records and vendor controls under the DPDP Act.
ChecklistNotice and consent
Marketing consent under the DPDP Act
A practical guide for Indian growth, sales and legal teams reviewing marketing consent, suppression workflows and evidence under the DPDP Act.
ChecklistNotice and consent
DPDP notice checklist for onboarding flows
A practical checklist for product, legal and engineering teams reviewing DPDP notices in onboarding flows before collecting personal data.
ChecklistNotice and consent
Layered privacy notices for Indian apps and websites
A practical guide for designing layered privacy notices for Indian apps and websites under the DPDP Act and DPDP Rules 2025.
ChecklistNotice and consent
Consent manager readiness under the DPDP framework
A practical readiness guide for Indian organisations planning consent manager integrations, governance, records and operational handoffs.
ChecklistNotice and consent
Consent records under the DPDP Act
A practical guide to building consent records under the DPDP Act for product, legal, marketing and compliance teams in India.
ChecklistNotice and consent
Legitimate uses under the DPDP Act for business teams
A practical guide for Indian business teams deciding when a DPDP Act legitimate use may apply and how to record the decision responsibly.
ChecklistNotice and consent
Consent withdrawal workflow under the DPDP Act
A practical checklist for Indian teams designing consent withdrawal workflows, records, ownership and follow-up actions under the DPDP Act.
ChecklistNotice and consent
Consent journey design under the DPDP Act
A practical guide to designing DPDP consent journeys for Indian apps, websites and digital products with records and withdrawal paths.
ChecklistNotice and consent
Notice under the DPDP Act for digital products
A practical checklist for DPDP notices in Indian digital products, apps, onboarding flows, dashboards and user journeys.
ChecklistNotice and consent
Notice under Section 5 of the DPDP Act
What a Data Fiduciary should review before putting consent and notice experiences into production.
Start with context
Book a focused DPDP Act consultation.
Bring an upcoming launch, notice review, data mapping question, incident readiness issue or implementation deadline. We will help identify the right next step.