Skip to content
WexandCounsel
Data Protection · India · Free check

Is DPDP relevant to you?

Fifteen questions about how your organisation handles personal data. Nothing you enter is stored or sent to Wex & Counsel.

Free check
0 of 15 answeredAbout 5 minutes
Does your organisation process personal data of people in India in digital form?
Do you know, in writing, which personal data you hold, why, and in which systems?
Do you give people a clear privacy notice when you collect their personal data?
Does your notice explain how to withdraw consent, exercise rights and complain to the Data Protection Board?
Where you rely on consent, is it a clear opt-in, separate from your general terms?
Can people withdraw consent as easily as they gave it?
Do you have a list of the vendors and cloud services that handle personal data for you?
Do your contracts with those vendors cover personal-data handling, security and deletion?
Is access to personal data restricted to people who need it, with logging in place?
Is personal data encrypted in transit and at rest?
Do you have a written plan for responding to a personal data breach, including notifying people and the Board?
Do you have a documented retention schedule, and is data actually deleted when it expires?
Do you have a published way for people to request access, correction or erasure, and a process to handle it?
Is a grievance contact published and are grievances answered within a set time?
Is someone in your organisation accountable for DPDP readiness, with a dated plan?