A calmer way to check your readiness.

Use this checklist to organise a first review. Mark items as you investigate them; completion does not establish legal compliance.

On this page

01 Know your data 02 Explain the process 03 Limit access and retention 04 Review partners and incidents Official sources

0 of 12 reviewed

Ticks reset when you leave the page.

01Know your data

List the categories of digital personal data you handle.Record where it comes from and which teams or systems use it.Identify the purpose for each use and any external sharing.

02Explain the process

Review the notices people see when information is collected.Check how consent is requested or withdrawn where consent is the relevant basis.Identify a route for questions, requests, and complaints.

03Limit access and retention

Review who can access each system and whether access remains appropriate.Document retention needs and deletion or anonymisation routines.Review backups, shared files, and former staff or vendor access.

04Review partners and incidents

List vendors and platforms that process personal data for you.Understand what contracts and security assurances exist.Document how staff should report a suspected data incident and who coordinates response.

Check the official sources

Review the official DPDP Act material from MeitY and the DPDP Rules 2025 publication. Recheck amendments and notifications.

A sensible first step

You don’t need every answer today.

Start by understanding what your business handles and what to review next.

Get my free readiness report ↗

Privacy readiness, made practical.
Built for the realities of Indian businesses.

Explore

Readiness support Readiness checklist DPDP Act guide All resources

For your organisation

Small businesses Coaching institutes Schools Clinics

Information

About Gopyata Contact Privacy policy Terms Disclaimer