ChecklistDPDP Compliance
Analytics tool review under the DPDP Act
A practical review guide for product analytics, web analytics and reporting tools that collect identifiers or behavioural data.
Insights
DPDP Act guidance for decisions in motion.
Guides, regulatory updates and practical checklists for Indian product, legal, compliance and security teams.
ChecklistDPDP Compliance
Marketing vendor privacy controls under the DPDP Act
A source-led checklist for reviewing agencies, campaign tools, pixels and enrichment vendors before customer data is used for marketing.
ChecklistDPDP Compliance
HR vendor privacy checklist under the DPDP Act
A practical checklist for reviewing payroll, recruitment, benefits and HR technology vendors before employee personal data is shared.
ChecklistProcessors and vendors
Data processing clauses for Indian customer contracts
A practical checklist for Indian businesses adding DPDP-ready data processing clauses to customer contracts and order forms.
ChecklistProcessors and vendors
Vendor due diligence before sharing personal data
A practical due-diligence model for Indian teams before personal data is shared with vendors, SaaS tools or processors.
ChecklistProcessors and vendors
Processor instructions under the DPDP Act
A practical checklist for Indian teams turning processor relationships into clear instructions, evidence and review controls.
ChecklistVendor privacy
Cloud service provider privacy checklist for Indian businesses
A practical checklist for Indian teams reviewing cloud providers, contracts, security evidence and DPDP-ready vendor governance.
GuideProcessors and vendor governance
SaaS vendor assessment for DPDP compliance
A practical SaaS vendor assessment guide for Indian businesses reviewing DPDP roles, access, safeguards, retention and breach support.
GuideProcessors and vendor governance
Vendor privacy review under the DPDP Act
A practical vendor privacy review guide for Indian businesses assessing processors, SaaS tools, data flows and DPDP operating evidence.
ChecklistProcessors and vendor governance
Data processor contract checklist under the DPDP Act
A practical checklist for Indian businesses reviewing processor contracts, security safeguards, erasure duties and evidence under the DPDP Act.
ChecklistPrivacy operations
Personal data breach register for Indian businesses
A practical register structure for Indian teams recording personal data breach facts, decisions, evidence, notices and remediation under DPDP readiness work.
ChecklistIncident readiness
Breach tabletop exercise for DPDP readiness
A practical tabletop exercise model for Indian teams testing breach escalation, evidence, vendor response and DPDP readiness.
GuideIncident readiness
Post-incident privacy review after a data breach
A practical post-incident review model for Indian teams turning breach response into governance fixes and evidence.
ChecklistSecurity safeguards
Security controls privacy teams should evidence under DPDP
A practical evidence checklist for privacy teams documenting security safeguards, logs, access controls and vendor oversight.
ChecklistIncident readiness
Vendor breach notification workflow under the DPDP Act
A practical workflow for Indian privacy, legal and security teams to get vendor breach notices fast, complete and usable.
GuideDPDP Act
Privacy steering committee model for Indian businesses
A practical model for Indian businesses to run DPDP privacy governance through a focused steering committee with clear evidence records.
ChecklistSecurity safeguards
Log retention and privacy incident evidence in India
A practical checklist for aligning privacy incident evidence, DPDP breach readiness and CERT-In log retention duties in India.
ChecklistSecurity and breach readiness
Privacy incident escalation playbook for Indian businesses
A practical escalation playbook for Indian teams handling privacy incidents, security alerts, evidence records and regulator-ready decisions.
GuideDPDP implementation
CERT-In and DPDP incident readiness for Indian companies
A practical readiness guide for Indian companies aligning CERT-In cyber incident reporting with DPDP personal data breach response.
ChecklistDPDP implementation
Personal data breach response under the DPDP Act
A practical breach-response checklist for Indian privacy, legal and security teams aligning DPDP Act duties with CERT-In incident evidence.
ChecklistDPDP implementation
Security safeguards under the DPDP Act
A practical checklist for Indian privacy, security and product teams turning DPDP security duties into evidence, owners and breach-ready controls.
GuideDPDP Act
Data auditor evidence pack for DPDP implementation
A practical evidence pack for Significant Data Fiduciary readiness, data auditor review and board-level DPDP implementation records.
GuideGovernance
Privacy risk assessment before scaling data processing
A practical DPDP risk-assessment workflow for Indian teams planning larger datasets, new models, new vendors or wider product rollout.
GuideSDF, DPO and audit readiness
DPIA workflow for Indian product teams
A practical DPIA workflow for Indian product teams preparing DPDP Act evidence, SDF readiness and launch governance.
GuideSDF, DPO and audit readiness
SDF readiness for high-volume data processing businesses
A practical readiness guide for Indian businesses whose scale of personal-data processing may attract Significant Data Fiduciary scrutiny.
GuideGovernance
Board reporting for Significant Data Fiduciary readiness
A practical board-reporting structure for Indian organisations preparing for Significant Data Fiduciary obligations under the DPDP Act.
GuideDPDP implementation
Periodic audit evidence for DPDP compliance
A practical guide for Indian privacy, compliance and product teams building audit-ready DPDP evidence before an SDF review.
GuideSDF, DPO and audit readiness
Independent data auditor readiness for Indian businesses
A practical readiness guide for Indian organisations preparing evidence, ownership and control testing before independent DPDP audits.
GuideDPDP implementation
Data protection impact assessment under the DPDP Act
A practical guide to DPIA readiness under the DPDP Act, including SDF triggers, annual assessment duties, evidence and control design.
ChecklistSDF readiness
DPO readiness checklist under the DPDP Act
A practical DPDP checklist for DPO readiness, covering reporting lines, role charter, request intake, evidence access and product-change controls.
GuideSDF readiness
Significant Data Fiduciary readiness under the DPDP Act
A practical DPDP guide to Significant Data Fiduciary readiness, covering governance, DPO planning, DPIA workflows, audit evidence and board reporting.
ChecklistChildren's data
Product launch checklist for children's data under DPDP
A practical DPDP launch checklist for products handling children's data, covering age states, notices, vendors, testing, support and evidence records.
GuideChildren's data
Vendor controls for children's personal data
A practical DPDP guide to reviewing vendors, SDKs, contracts, support tools and data pipelines that process children's personal data.
GuideChildren's data
Behavioural tracking restrictions for children's data
A practical DPDP guide to reviewing behavioural tracking, profiling, analytics, advertising SDKs and experiments for child-user data in India.
GuideChildren's data
Children's data risks in gaming and social products
A practical DPDP readiness guide for gaming and social products handling children's data, covering accounts, chat, rewards, tracking, vendors and support.
GuideChildren's data
Children's data checks for edtech products in India
A practical DPDP readiness guide for edtech products handling children's data across student accounts, schools, parents, vendors and support flows.
GuideChildren's data
Age gating design under the DPDP Act
A practical guide to age gating design under the DPDP Act, covering age signals, product triggers, parent flows, feature controls and evidence records.
GuideChildren's data
Verifiable parental consent workflow for Indian apps
A practical workflow for Indian apps to design verifiable parental consent, age triggers, parent journeys, verification methods and evidence records.
GuideChildren's data
Children's data readiness under the DPDP Act
A practical readiness guide for children's data under the DPDP Act, covering age assessment, parental consent, product features and evidence records.
GuideData principal rights
Escalation matrix for privacy grievances in India
A practical escalation matrix for privacy grievances in India, covering intake, risk triggers, owners, response levels and evidence records.
GuideData principal rights
Customer support playbook for DPDP rights requests
A practical DPDP rights request playbook for customer support teams covering intake, triage, verification, escalation and closure evidence.
GuideData principal rights
Data principal request register under the DPDP Act
A practical guide to building a DPDP-ready data principal request register for intake, verification, ownership, evidence and closure tracking.
GuideData principal rights
Data deletion workflow for SaaS and app teams in India
A practical deletion workflow for SaaS and app teams handling DPDP Act rights requests, retention exceptions, vendors, logs and evidence records.
ChecklistData principal rights
Correction and erasure request handling under the DPDP Act
A practical checklist for Indian teams handling correction and erasure requests, identity checks, retention exceptions, vendors and evidence records.
ChecklistDPDP Implementation
Grievance redressal workflow under the DPDP Act
A practical DPDP grievance redressal workflow for Indian teams, covering intake, identity checks, escalation, response records and closure evidence.
ChecklistDPDP Implementation
Nomination right under the DPDP Act for product teams
A practical checklist for implementing the DPDP nomination right in account settings, rights workflows, support processes and verification paths.
ChecklistDPDP Implementation
Data access request process for Indian businesses
A practical checklist for handling DPDP data access requests, covering intake, identity checks, data-source searches, response packages and records.
ChecklistDPDP Implementation
Identity verification before answering data principal requests
A practical checklist for verifying identity before DPDP rights responses, with request tiers, escalation rules, refusal language and audit records.
ChecklistData principal rights
Data principal rights workflow under the DPDP Act
A practical workflow for Indian teams handling data principal rights requests, identity checks, system searches, vendor actions and evidence records.
ChecklistNotice and consent
Privacy notice version control for DPDP compliance
A practical checklist for Indian teams managing privacy notice versions, approvals, consent records and archives for DPDP readiness.
ChecklistNotice and consent
Multilingual privacy notice review under the DPDP Act
A practical review model for Indian teams preparing multilingual privacy notices, consent journeys, version records and support workflows under the DPDP Act.
ChecklistNotice and consent
Employee notice and consent under the DPDP Act
A practical checklist for Indian HR, legal and security teams preparing employee notices, consent records and vendor controls under the DPDP Act.
ChecklistNotice and consent
Marketing consent under the DPDP Act
A practical guide for Indian growth, sales and legal teams reviewing marketing consent, suppression workflows and evidence under the DPDP Act.
ChecklistNotice and consent
DPDP notice checklist for onboarding flows
A practical checklist for product, legal and engineering teams reviewing DPDP notices in onboarding flows before collecting personal data.
ChecklistNotice and consent
Layered privacy notices for Indian apps and websites
A practical guide for designing layered privacy notices for Indian apps and websites under the DPDP Act and DPDP Rules 2025.
ChecklistNotice and consent
Consent manager readiness under the DPDP framework
A practical readiness guide for Indian organisations planning consent manager integrations, governance, records and operational handoffs.
ChecklistNotice and consent
Consent records under the DPDP Act
A practical guide to building consent records under the DPDP Act for product, legal, marketing and compliance teams in India.
ChecklistNotice and consent
Legitimate uses under the DPDP Act for business teams
A practical guide for Indian business teams deciding when a DPDP Act legitimate use may apply and how to record the decision responsibly.
ChecklistNotice and consent
Consent withdrawal workflow under the DPDP Act
A practical checklist for Indian teams designing consent withdrawal workflows, records, ownership and follow-up actions under the DPDP Act.
ChecklistNotice and consent
Consent journey design under the DPDP Act
A practical guide to designing DPDP consent journeys for Indian apps, websites and digital products with records and withdrawal paths.
ChecklistNotice and consent
Notice under the DPDP Act for digital products
A practical checklist for DPDP notices in Indian digital products, apps, onboarding flows, dashboards and user journeys.
GuideDPDP Act
DPDP implementation mistakes Indian companies should avoid
A practical guide to common DPDP implementation mistakes Indian companies should avoid across data, vendors, notices and evidence.
GuideDPDP Act
DPDP readiness after a product or vendor change
A practical guide to refreshing DPDP readiness after product, vendor, analytics, support or internal workflow changes.
GuideDPDP Act
DPDP Act operating model for legal and security teams
A practical DPDP operating model for legal, security, product and business teams that need owners, records and escalation paths.
GuideDPDP Act
DPDP compliance evidence records for Indian businesses
A practical guide to DPDP compliance evidence records for Indian businesses building privacy governance and audit readiness.
GuideDPDP Act
DPDP Act readiness for startups preparing for funding
A practical DPDP readiness guide for Indian startups preparing for investor diligence, enterprise sales or funding rounds.
GuideDPDP Act
DPDP implementation plan for multi-entity groups
A practical DPDP implementation plan for Indian groups operating across entities, brands, products, systems and vendors.
GuideDPDP Act
DPDP Act documentation pack for internal teams
A practical DPDP documentation pack for Indian teams that need implementation records, owners, workflows and governance evidence.
GuideDPDP Act
DPDP readiness checklist before launching a new product
A practical pre-launch DPDP checklist for Indian product, legal, security and growth teams before a new product goes live.
GuideDPDP Act
Personal data inventory under the DPDP Act
A practical guide to building a personal data inventory for DPDP implementation across products, teams, vendors and records.
GuideDPDP Act
Purpose mapping for DPDP Act implementation
A source-led guide to purpose mapping under the DPDP Act for Indian teams designing notices, controls and evidence records.
GuideDPDP Act
DPDP compliance gap assessment for growing companies
A practical DPDP gap assessment guide for growing Indian companies balancing product speed, vendors, governance and evidence.
GuideDPDP Act
DPDP Act implementation roadmap for Indian businesses
A practical roadmap for Indian businesses turning DPDP Act obligations into owners, workflows, records and implementation controls.
GuideDPDP Act
DPDP applicability assessment for Indian organisations
How Indian organisations should test whether a workflow falls within the DPDP Act and document the resulting controls.
GuideDPDP Act
Data fiduciary obligations under the DPDP Act
A practical guide to converting Data Fiduciary duties under the DPDP Act into operating controls and evidence records.
GuideDPDP Act
DPDP Act readiness for technology businesses
A practical first-pass framework for product, legal and security teams deciding what to document and implement first.
ChecklistNotice and consent
Notice under Section 5 of the DPDP Act
What a Data Fiduciary should review before putting consent and notice experiences into production.
GuideHeightened duties
Children's data under Section 9 of the DPDP Act
Heightened duties for teams building products that may process a child's personal data.
GuideGovernance
Preparing for Significant Data Fiduciary duties
Section 10 readiness for organisations that may be notified as Significant Data Fiduciaries.
Regulatory updateIncident readiness
CERT-In directions and incident readiness
A concise operational view of incident reporting and log retention obligations relevant to security and privacy teams.
CommentaryLegal framework
Sensitive personal data: SPDI rules and the DPDP framework
How older SPDI terminology and the DPDP Act should be distinguished in current privacy assessments.
Start with context
Book a focused DPDP Act consultation.
Bring an upcoming launch, notice review, data mapping question, incident readiness issue or implementation deadline. We will help identify the right next step.