DPDP Compliance Risk Scanner

DPDP Act 2023 – Compliance Risk Scanner

Step 1: Data Collection & Consent

1. Explicit consent mechanism? (10) Yes No
2. Consent recorded & auditable? (5) Yes No
3. Clear privacy notice provided? (5) Yes No
4. Purpose limitation defined? (5) Yes No

Step 2: Data Principal Rights

5. Access request mechanism? (5) Yes No
6. Correction & erasure facility? (5) Yes No
7. Grievance redressal officer appointed? (5) Yes No
8. Response timelines defined? (5) Yes No

Step 3: Security & Governance

9. Technical security safeguards? (10) Yes No
10. Data breach response plan? (10) Yes No
11. Vendor/processor agreements compliant? (5) Yes No
12. Data retention policy defined? (5) Yes No

Step 4: Risk & Accountability

13. Periodic compliance audit conducted? (10) Yes No
14. Data Protection Officer appointed (if required)? (5) Yes No
15. Internal compliance documentation maintained? (10) Yes No
0%