Skip to content
SecureKnots
Book a call

Privacy & AI · Digital Personal Data Protection Act, 2023 (India)

India's comprehensive data protection law, with implementing rules being phased in, covering consent, data fiduciary duties and rights of data principals.
Book a DPDPA assessment

Issued by

Government of India

Typical timeline

8-12 weeks

Assessed by

Gap assessment & audit

Validity

Ongoing obligation

Overview

  • 01Companies processing personal data of people in India
  • 02Global firms with Indian operations or users
  • 03Significant Data Fiduciaries designated by government

Requirements

  1. 01Notice & consentClear, itemized notices and verifiable consent, including via consent managers.
  2. 02Data fiduciary obligationsAccuracy, security safeguards, retention limits and breach reporting.
  3. 03Rights of data principalsAccess, correction, erasure and grievance redressal.
  4. 04Significant Data FiduciariesDPO, independent audits and DPIAs where designated.

Our approach

Week 1

01

Scope

We learn your product, your buyers and your deadlines, then fix the exact frameworks, boundaries and systems in scope.

Weeks 2-3

02

Assess

Control-by-control gap assessment against every target framework at once, with a single prioritized findings register.

Weeks 3-10

03

Remediate

Policies written, controls implemented, evidence automated. We work inside your tools, Jira, GitHub, AWS, Google Workspace.

Weeks 10-14

04

Audit

Mock audit, auditor selection and fieldwork coordination. Your independent auditor issues the report; we sit beside you until they do.

Year-round

05

Sustain

Continuous monitoring, quarterly testing and a renewal calendar that never surprises you.

Customer story

MCMeridian Capital MarketsMumbai, IN
Sample

3 → 1

Programs consolidated

One framework for SEBI, ISO 27001 and India's new privacy law.

SEBI CSCRFISO 27001DPDPA

FAQ

Typical timeline: 8-12 weeks, depending on scope, maturity and team availability. We'll give you a firm plan after a two-week scoping and gap assessment.

Yes, that's our specialty. DPDPA shares substantial control overlap with GDPR and ISO 27701, so we build one control set and map evidence across all of them.

Next framework

PCI DSS

Financial ServicesPCI Security Standards Council

End of the thread

A 30-minute call with a senior practitioner. You leave with a plan either way.

Book a consultationcontact@secureknots.com

We handle audit readiness and auditor coordination. Your SOC reports and ISO certificates are always issued by independent, accredited auditors.

Cookies, tied neatly

We use essential cookies to run this site and, with your permission, analytics to improve it. Privacy policy