Security & Privacy
Popular
Web Application Penetration Test
A hands-on penetration test of your web application, with evidence for every finding and a free retest after you fix the issues.
₹32,999
Security & Privacy
OB-SEC-102
DPDP Act Gap Assessment
A practical review of how you handle personal data against the DPDP Act 2023, covering consent, retention, privacy notices and breach response.
- Timeline
- 15 working days
- Deliverables
- 7 listed
- Fixed price
- ₹24,999
What this service delivers
The Digital Personal Data Protection Act, 2023 sets new duties for how businesses in India handle personal data, and many product teams have not yet mapped where theirs is stored. We trace it across your database, analytics tools, support inbox, marketing platform and the spreadsheets sitting on staff laptops. We then assess consent, retention and vendor agreements against the Act. This is an engineering-led assessment rather than legal advice, and we clearly mark the points where you should consult a lawyer.
Deliverables 7 items
What you receive
- Inventory of where personal data sits across systems, suppliers and storage
- Diagrams showing how data is collected, used, shared and deleted
- Gap assessment against the Act, with severity for each gap
- Review of consent notices and capture, with suggested replacement wording
- Proposed retention period for each data category
- Process for handling access, correction and deletion requests
- Breach notification procedure, plus a fix-up plan with effort estimates
How the work runs, in 4 steps
-
Step 1: Interviews
System owners explain what data they collect and why
-
Step 2: Mapping
Data flows are traced and documented end to end
-
Step 3: Assessment
Practices are compared with the Act's requirements
-
Step 4: Plan
Gaps are ranked and a remediation plan is presented
Who it suits, and what we need from you
Ideal for
- Indian businesses holding any amount of customer personal data
- Products expanding the data they collect from Indian users
- Teams relying on a privacy policy borrowed from another website years ago
What we need from you
- Short interviews with the owner of each system
- Your current privacy policy, vendor list and consent screens
- A senior person to own the follow-up work
You share these through the brief in your account after checkout.
What changes for your team
-
01
A clear map of where personal data actually lives
-
02
Consent and retention practices you can confidently defend
-
03
A prioritised plan instead of a general sense of risk
Questions about this service
No. It is a technical and operational assessment. We highlight where a lawyer should review your position.
We suggest wording for consent notices and point out where the policy no longer matches practice. Final policy text should be approved by your legal adviser.
This is a remote technology service, so nothing is shipped physically. Work is delivered into systems you control. Read delivery and handover and refunds and cancellation for the full terms.