Data protection & privacy controls
Privacy obligations, turned into working controls.
Data inventory, consent, retention, rights requests and breach response, built into your systems for the DPDP Act, US state laws and GDPR.
Why teams call us
Problems this solves
-
01
New obligations under the DPDP Act
Notice, consent, retention limits, breach notification and rights requests now apply in India.
-
02
No idea where personal data lives
Customer data is copied across apps, spreadsheets, test systems and vendors.
-
03
Rights requests handled by email
Access and erasure requests take weeks and are hard to complete.
-
04
Several laws at once
Indian, US state and EU privacy laws apply to the same customer base.
Our approach
Privacy laws are implemented in systems, not just in policies. We map where personal data is collected, stored and shared, then build the controls the law expects: versioned notices and consent records, retention and deletion, request workflows, security safeguards and breach response.
We work alongside your legal counsel, who interprets the law for your situation; we design and implement the technical and process controls and help you evidence them.
What is included
-
Data inventory and mapping
Personal data by system, purpose, location and recipient.
-
Notice and consent
Versioned notices and consent records with withdrawal flows.
-
Retention and deletion
Retention schedules and automated deletion or anonymisation.
-
Rights requests
Intake, identity checks and fulfilment across systems.
-
Breach readiness
Detection, a combined notification playbook and templates.
-
Processor management
Data processing agreements and vendor assessments.
What you receive
- Data inventory and data-flow maps
- Retention schedule
- Consent and notice implementation
- Rights-request workflow
- Breach response playbook
- Processor register and DPAs
Technology we work with
- DPDP Act 2023
- DPDP Rules 2025
- CCPA / CPRA
- GDPR
- Data masking
- Consent management
Industries
How an engagement runs
Every engagement starts with a signed agreement and an advance payment as set out in your proposal. Work begins once both are complete.
-
01
Discover
Data inventory and current practices mapped.
-
02
Assess
Gaps against the laws that apply to you.
-
03
Implement
Controls built into systems and processes.
-
04
Operate
Requests, reviews and breach drills run regularly.
Ready to start? Talk to us directly.
Tell us what you need in a few lines. A specialist replies with next steps and a written proposal before any work begins.
Frequently asked questions
Can't find your answer? Ask us
Are you lawyers?
Where do we start with the DPDP Act?
Do you mask data in test environments?
Start with a conversation.
Share a few details. A specialist replies with next steps, usually starting with a short call.