Does the DPDP Act apply to you? Map what you process
Tick what your business collects, the tools it uses and where the data goes. You get a map: the duties that match each item, each labelled with its section or rule, and the toolkit documents that cover them. Your ticks stay on your device. If you accept analytics, from this map we count only that you started and finished, and your business type.
A quick check. Get legal advice for your situation. For the Act’s scope, see Does the DPDP Act apply to my business?
The interactive map needs JavaScript. Turn it on to use it, or read the free duties list instead.
The usual items for an online store are ticked for you. Untick what does not apply and add what does.
Let’s tick a few more
On your answers we could not see processing the Act covers yet. Tick what applies above and check again.
A quick check. Get legal advice for your situation.
Your processing map
What you process, and what the Act asks
Where you may have gaps
Start with these documents
Get the toolkit Read the free duties list
This is a quick check that reflects only your answers and cannot say whether you comply. Get legal advice for your situation.
- Step 01: Start hereFind out whether the Act applies, then see which duties you already cover.
- Step 03: Know your dataMap every way your business uses personal data. Most other documents build on this one.
- Step 04: Set the rulesThe Data Protection Policy your business commits to, in 17 sections.
- Step 05: Ask properlyThe notice that must come with, or before, every request for consent.
- Step 06: Keep only as long as neededTurn retention periods into deletion dates, and track every erasure.
- Step 07: Answer people on timeA form for people to ask about their data, and a tracker so you answer on time.
- Step 09: Control your vendorsScreen each vendor before you sign, and see who still needs work.
- Step 09b: Sign the vendor contractThe Data Processing Agreement: 15 clauses, plus Schedules A and B.
- Step 10: Data leaving IndiaLog every transfer abroad and re-check it against the gazette.
- Step 11: When something goes wrongLog a breach, file both Board reports on time, and tell the people affected.