Blog

Practical reading for teams doing the work.

Guides, checklists, and templates to help you move from an initial readiness view to a working set of practices, updated as the platform grows.

Guide

DPDPA guides

A practical introduction to the DPDPA for business teams

A plain-language walkthrough of what the DPDPA covers and what it typically means for day-to-day operations.

Read the guide

Guide

DPDPA guides

Understanding data fiduciaries, processors, and data principals

Explanations of the core roles referenced throughout DPDPA readiness work.

Read the guide

Checklist

Privacy readiness checklists

Privacy readiness starter checklist

A short checklist covering the essentials teams commonly tackle first.

Open the checklist

Checklist

Privacy readiness checklists

Vendor and processor review checklist

Questions to ask before onboarding a vendor that will handle personal data.

Open the checklist

Template

Personal Data Processing Register templates

Personal Data Processing Register starter template

A structured starting point for documenting processing activities, systems, and vendors.

Get the template

Guide

Data-mapping guidance

How to run your first data-mapping workshop

A practical approach for bringing teams together to trace how personal data actually flows.

Read the guide

Guide

Incident and breach-preparedness guidance

Building a basic incident response workflow

The essential roles, steps, and communications to define before an incident happens.

Read the guide

Checklist

Incident and breach-preparedness guidance

First 24 hours: incident response checklist

A short reference checklist for the first steps after a suspected personal data incident.

Open the checklist

Update

Product updates

What's new on the platform

A running log of platform improvements as they ship.

See what's new

Prefer to start from your industry?

Each industry page explains what personal data typically looks like in your sector and links to the guides and checklists most relevant to it.

SaaS and technology

Often a fiduciary and a processor at once, with a growing vendor stack.

Typical data: Account, profile, and authentication data · Product usage and analytics data

DPDPA for SaaS and technology

Fintech

DPDPA alongside RBI and SEBI obligations, with sensitive KYC and financial data.

Typical data: KYC documents and identity proofs · Transaction and account data

DPDPA for fintech

Healthcare

Patient records touched by many people and systems over time.

Typical data: Patient records and treatment history · Diagnostic and lab results

DPDPA for healthcare

Education

Student records spanning minors and adults, kept long after they leave.

Typical data: Admission and enrolment records, including parent or guardian details · Academic performance, attendance, and examination records

DPDPA for education

Insurance

Health, financial, and identity data held for the life of a policy and beyond.

Typical data: Policy applications and underwriting data, including medical history · Claims records and supporting documentation

DPDPA for insurance

E-commerce

Customer, payment, and browsing data at high volume, plus a logistics chain on every order.

Typical data: Account, browsing, and purchase history · Delivery address and contact details

DPDPA for e-commerce

BPO / ITES

Client's customer data processed at scale, almost always as a processor, not a fiduciary.

Typical data: Customer data processed on behalf of clients (calls, chats, tickets) · Call recordings and screen-capture logs

DPDPA for BPO and ITES

Digital services

User and audience data collected through apps, content, and advertising, often via third-party ad-tech.

Typical data: Account and profile data · Usage, engagement, and device data

DPDPA for digital services