Free download
The DPDP readiness checklist, as work you can assign.
Nine areas, from knowing what data you hold to answering for a breach. Each check names the provision it comes from and the evidence a reviewer will ask to see. It prints cleanly, so you can take it into a working session.
Readiness checklistPDF ready
- Covers
- The DPDP Act, 2023 and the Rules as notified
- Format
- 9 areas, 36 checks, evidence for each
- Use it for
- A first workshop, a board update or a vendor review
What is inside
Nine areas, each with its source and its evidence
- Data inventoryGroundwork for every duty in the Act
- Purposes and retentionSections 4, 6 and 8(7)
- NoticesSection 5 and Rule 3
- ConsentSection 6
- Rights and grievancesSections 11 to 14, and section 8(10)
- ErasureSection 8(7) and section 12
- Security and breach responseSection 8(5) and 8(6)
- Processors and childrenSection 8(2) and section 9
- AccountabilitySection 8(9), and section 10 for Significant Data Fiduciaries
Prefer a quick score first? The gap assessment takes about five minutes.
A sample area
Security and breach response
From Section 8(5) and 8(6). The full checklist covers all nine areas in this form.
- Reasonable security safeguards, written down and reviewed
- A tested process to assess a personal data breach
- The Board and each affected person told without delay
- The detailed report to the Board within 72 hours of becoming aware
Evidence to keep
Incident records with timestamps, decisions and the notices sent.
How TrustOS runs it: breach responseQuestions
About the checklist
- Who is the checklist for?
- Anyone who has to make DPDP work in an organisation: a DPO or privacy lead, legal and compliance teams, or the person in IT or product who has been handed the job. It also works as an agenda for a first internal workshop.
- Is it legal advice?
- No. It is a plain summary of the duties in the DPDP Act, 2023 and the Rules as notified, arranged as work. Your counsel decides how the law applies to your organisation.
- How is it different from the gap assessment?
- The gap assessment gives a quick score from nine statements. The checklist goes one level down: the individual checks in each area, the provision they come from and the evidence to keep.
See it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.