How ready is your organisation for the DPDP Act?

Do you have a documented process for capturing and recording user consent before collecting personal data?

Do you maintain an up-to-date inventory of what personal data you hold and where it is stored?

Do you have a documented incident-response plan for a personal-data breach, including notification timelines?

Have you designated a Data Protection Officer or an equivalent grievance-handling point of contact?

Do you have data-processing agreements in place with third-party vendors who handle personal data on your behalf?

Have employees who handle personal data received any data-protection training in the last 12 months?