GRC · Service
DPDP readiness and implementation
Be ready for 13 May 2027, when every DPDP duty applies.
- Timeline
- 6 to 12 weeks
- Who does the work
- Infofacility consultants, working remotely as part of your team
- Price
- On request
What you get
- A data map: what personal data you hold, why, where it goes and who processes it.
- Notices and consent that meet s. 5, s. 6 and Rule 3.
- Security safeguards, breach response and erasure that meet s. 8 and Rules 6 to 8.
- Rights handling and grievance redressal, and the DPO, DPIA and audit if you are a Significant Data Fiduciary.
What it covers
The scope is agreed on the scoping call and written down before the work starts.
How an engagement runs
First weeks
Gap assessment
Where you stand against the standard or the law, and a plan that fixes the biggest gaps first.
Middle
Build
Policies, records and controls written with your team, in the tools you already use.
Before the audit
Run and evidence
The controls running, the evidence collected, and an internal check before anyone external looks.
The audit
Audit and after
Support through the audit or assessment, and a handover so your team can run it.
The requirements it answers
The frameworks, laws and regulators whose requirements this work gives you evidence for.
Pricing
DPDP readiness and implementation
Price on request
Scope sets the price. Book a scoping call for a written quote, in USD or rupees.
Related services
GRC · Service
ISO 27001 certification support
From gap assessment to the certification audit, with the Statement of Applicability written with you.
3 to 6 months
GRC · Service
ISO 27701 privacy management
A privacy information management system, on its own or beside your ISO 27001, mapped to DPDP and GDPR.
2 to 4 months
GRC · Service
ISO 42001 AI management system
Policies, impact assessments and the Annex A controls that apply to the AI you build or use.
3 to 6 months
Request a callback
Tell Infofacility what you need and by when. A consultant calls you back to agree the scope and send a quote.