Privacy programmes that stand up to scrutiny.
DPDPA and GDPR alignment, DPIAs, data mapping, records of processing and ISO 27701 — turning privacy obligations into working processes, controls and evidence.
From obligations to operating controls.
DPDPA 2023 & GDPR alignment
Gap assessment against India's Digital Personal Data Protection Act and the EU GDPR, with a prioritized implementation roadmap.
ISO/IEC 27701 PIMS
Privacy Information Management System implementation, integrated with your ISO 27001 ISMS.
DPIA & privacy impact assessments
Data protection impact assessments for new products, processing activities and AI use cases.
Privacy by Design
Privacy requirements and privacy engineering patterns embedded into product design and SDLC.
Data mapping & records of processing
Data inventories, data-flow maps and records of processing activities that stay current.
Vendor & third-party privacy assessments
Due diligence and ongoing assessment of processors and sub-processors.
A privacy programme, not a policy binder.
Privacy governance
Roles, responsibilities, policies and a privacy operating model with clear ownership.
Consent & notice
Notice and consent flows aligned to DPDPA and GDPR requirements, including rights-request handling.
Data subject rights
Processes and tooling to handle access, correction, erasure and grievance requests within required timelines.
Breach readiness
Personal-data breach response procedures, playbooks and tabletop exercises.
Sector alignment
Alignment with CCPA and HIPAA requirements where you operate in those markets.
Privacy-awareness training
DPDPA / GDPR awareness programmes for product, engineering and support teams, informed by IAPP and DSCI curricula.
Proof pointOur privacy practice is informed by IAPP and DSCI frameworks, alongside our team's privacy certifications. Privacy-awareness training is delivered jointly with VVNT Foundation.
Pairs naturally with ISO and security.
Ready to discuss your privacy programme?
Tell us where personal data flows through your business and which regulations apply — we'll come back with an assessment and implementation plan.