Resources
Reading for the people doing the work.
Plain reference pages on the Act, practical guides on running each duty, and longer articles on the questions that take real thought. Written by the TrustOS team, dated, and kept up to date.
Guides
How teams run each duty
Fifteen practical guides, from mapping the data you hold to closing a breach.
Getting started · 12 min
Choosing where to begin
Most DPDP programmes stall because the whole Act looks like one project. A short assessment tells you which area to start with, who owns it and what the first phase should leave behind.
Deployment · 11 min
Configuring for the data environment you have
A sector example saves you from the blank page. It describes a typical organisation, and TrustOS earns its place once it uses your service names, your systems, your vendors and your owners.
Deployment · 11 min
Connecting TrustOS to the systems you already run
An erasure that someone says they did is weaker evidence than one the system itself confirms. TrustOS connectors are scoped, approved and checked, and systems without a connector are still covered.
Governance · 10 min
Meeting Significant Data Fiduciary obligations
A Significant Data Fiduciary needs a Data Protection Officer in India, an independent data auditor, yearly impact assessments and audits, and a review of its algorithmic software. Each duty takes time to set up, and the order of preparation matters.
Deployment · 12 min
Running TrustOS on your own infrastructure
A compliance platform holds personal data, so where it runs is itself a compliance decision. Deploying TrustOS inside your own environment keeps the platform and its records under your control, and hosting remains the better choice for some organisations.
Breach · 12 min
Coordinating a breach from detection to closure
A personal data breach starts two notification duties and a 72 hour report, all counted from when you became aware. That work runs best from one shared incident record.
Articles
Three series on the hard questions
Longer pieces on engineering for the Act, consent and children's data, and breaches.
Reference
The DPDP Act, one topic at a time
- Timeline
- Data Principal rights
- Notice and consent
- Breach notification
- Children's data
- Significant Data Fiduciaries
- Consent Managers
- Penalties
- Legitimate uses
- Who it applies to
- Data Protection Officer
- Cross-border transfers
- Retention and erasure
- Security safeguards
- Data Processors
- DPDP Act and GDPR
- Data Protection Board
- Glossary
See it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.