Privacy & Data Protection Services
Privacy programmes that stand up to scrutiny.
DPDPA and GDPR alignment, DPIAs, data mapping, records of processing and ISO 27701 — turning privacy obligations into working processes, controls and evidence.
From obligations to operating controls.
DPDPA 2023 & GDPR alignment
Gap assessment against India's Digital Personal Data Protection Act and the EU GDPR, with a prioritized implementation roadmap.
ISO/IEC 27701 PIMS
Privacy Information Management System implementation, integrated with your ISO 27001 ISMS.
DPIA & privacy impact assessments
Data protection impact assessments for new products, processing activities and AI use cases.
Privacy by Design
Privacy requirements and privacy engineering patterns embedded into product design and SDLC.
Data mapping & records of processing
Data inventories, data-flow maps and records of processing activities that stay current.
Vendor & third-party privacy assessments
Due diligence and ongoing assessment of processors and sub-processors.
A privacy programme, not a policy binder.
Privacy governance
Roles, responsibilities, policies and a privacy operating model with clear ownership.
Consent & notice
Notice and consent flows aligned to DPDPA and GDPR requirements, including rights-request handling.
Data subject rights
Processes and tooling to handle access, correction, erasure and grievance requests within required timelines.
Breach readiness
Personal-data breach response procedures, playbooks and tabletop exercises.
Sector alignment
Alignment with CCPA and HIPAA requirements where you operate in those markets.
Privacy-awareness training
DPDPA / GDPR awareness programmes for product, engineering and support teams, informed by IAPP and DSCI curricula.
Proof pointOur privacy practice is informed by IAPP and DSCI frameworks, alongside our team's privacy certifications. Privacy-awareness training is delivered jointly with VVNT Foundation.
Pairs naturally with ISO and security.
Trusted by engineering, security & compliance teams at HCL, Larsen & Toubro, Zomato (Eternal), Blinkit and Biocon — see client engagements →
CDPO and GDPR Practitioner-certified practitioners, recognised as a Fellow of Privacy Technology — verify our credentials →
Common questions, answered.
What does DPDPA 2023 and GDPR alignment involve?
A gap assessment against India's Digital Personal Data Protection Act and the EU GDPR, followed by a prioritized implementation roadmap rather than a generic checklist.
What is a DPIA and when do we need one?
A Data Protection Impact Assessment evaluates privacy risk for new products, processing activities or AI use cases — typically needed before launching something that processes personal data in a new way.
How is ISO/IEC 27701 different from general privacy consulting?
ISO/IEC 27701 is a certifiable Privacy Information Management System that extends your ISO 27001 ISMS, giving privacy controls the same audit rigor as security controls.
Do you help with data subject rights requests and breach response?
Yes — processes and tooling for access, correction, erasure and grievance requests, plus breach-response procedures, playbooks and tabletop exercises.
Do you assess third-party and vendor privacy risk?
Yes — due diligence and ongoing assessment of processors and sub-processors is part of the privacy governance practice.
Ready to discuss your privacy programme?
Tell us where personal data flows through your business and which regulations apply — we'll come back with an assessment and implementation plan.