MEHTA & MEHTA Company Secretaries
Back to The DPDP Act Section D

Ongoing Compliance

Sustaining compliance as processing, vendors and products change.

Periodic Compliance Management

  • Annual DPIA and independent audit for Significant Data Fiduciaries.
  • Review of notices, consent flows and the RoPA.
  • Retention and erasure cycle reviews.

Rights & Grievance Desk

  • Tracking of rights requests against statutory timelines.
  • Grievance register maintained within the 90-day limit.

Breach Response Support

  • Breach classification and Data Principal intimation.
  • 72-hour Board report and CERT-In coordination.

Training & Awareness

  • Role-based training across relevant functions.
  • Board and senior-management briefings.

Regulatory Watch & Board Reporting

  • Tracking of Board orders and MeitY notifications.
  • Quarterly compliance dashboards.

Annual DPDP Health Check

  • Consent, security, contract and governance review.
  • Audit-readiness assessment.

Speak With Our Data Protection & Privacy Team

Contact Us Back to The DPDP Act