Lawful consent, a clear privacy notice, a grievance officer, and a process for data-principal rights (access, correction, erasure).
DPDP penalties run into crores for serious breaches — build readiness early.
A ballpark to help prioritise — not an assessment of your liability.
Track this with your team. Add it to your organisation's compliance register to set due dates and reminders. Open your workspace →
Educational guide, not legal advice. Whether this applies — and the exact due dates, thresholds and penalties — depends on your entity type, turnover, headcount, sector and state. Confirm specifics with a qualified professional.