Description
What this service covers
The DPDP Act 2023 changes how Indian businesses must handle personal data, yet few product teams know where all of theirs lives. We trace it through your database, analytics tools, support inbox, marketing platform and any spreadsheets sitting on staff laptops, then test consent, retention and processor agreements against the Act. Every gap receives a severity rating. You get revised consent wording, a retention schedule, a way to handle requests to see, fix or delete data, and a breach notification procedure with a costed fix plan. This is an engineering-led review rather than legal advice; we highlight where your lawyers should weigh in.
What you receive
- A map of personal data held across systems, suppliers and storage
- Diagrams showing how data is collected, used, shared and deleted
- Each obligation under the Act checked, with gaps rated by severity
- Consent screens and notices reviewed, with improved wording provided
- A suggested retention period for every data category
- A workflow for handling access, correction and deletion requests
- A breach notification process and a fix plan with effort estimates
The work in 4 stages
-
01
Stage 1: Locate
System owners are interviewed and personal data found, including hidden copies.
-
02
Stage 2: Trace
Data movement is documented from first capture to final deletion.
-
03
Stage 3: Compare
Current practice is checked against each clause of the Act.
-
04
Stage 4: Prioritise
Gaps are ranked, each with an owner, an effort figure and a suggested order.
Who it suits, and what we need from you
Ideal for
- Indian businesses storing any amount of customer personal data
- Products expanding the data they collect from Indian users
- Businesses using a privacy policy borrowed from another website years ago
What we need from you
- Brief interviews with each system owner
- Your current privacy policy, supplier list and consent screens
- A leader prepared to own the follow-up work
You share these through the brief on your order page after checkout.
What changes for your team
- A true picture of where your personal data is stored
- Consent and retention practices you can defend with confidence
- A prioritised plan instead of a general feeling of risk
Questions about this service
Does this count as legal advice?
Is the European data protection regulation covered?
We are a small startup with a few thousand users. Are we covered?
This is a remote service: nothing is shipped physically, and the work is delivered into systems you control. See delivery and handover and refunds and cancellation for the full terms.
Reviews
There are no reviews yet.