Start here

What it’s for

Two questions give a first check on whether India's data protection law covers your business. The Reality Check workbook then rates your Significant Data Fiduciary risk factors and walks you through 19 legal duties and 1 good-practice item, with a citation and penalty category for each duty, so you can see your gaps before you plan anything.

What you fill in

1. 1

   Does this apply to you? (Word)

   A two-question guide, with a plain-terms summary of the duties and the date they switch on.

2. 2

   Reality Check workbook

   Four tabs: Instructions, SDF Risk Factors, Obligations Checklist and Dashboard.

3. 3

   SDF Risk Factors tab

   Rate the six factors the Act lists. This only flags risk. The Central Government decides who is a Significant Data Fiduciary.

4. 4

   Obligations Checklist tab

   Nineteen legal duties and one good-practice item, each with its citation and penalty category. You set a status for every duty, and the sheet shows at a glance which are in place.

5. 5

   Dashboard tab

   Counts the duties that apply to you, shows how many are still unconfirmed, and maps your gaps to the Act's penalty ceilings without adding them up. The free duties list shows what the Act asks; the workbook is where you record where you stand.

From the video

Two frames from the walkthrough. The worked example is a fictional online store.

Basis G.S.R. 843(E), para (c); Act s.10(1); Act Schedule, Sl. 1 and 2; Act s.33(1). How we arrived here