Fourteen practical items HR teams need to confirm before the next compliance audit. Drawn from our plain-language explainer; print, tick, archive.
Fill in the fields below. The tool runs entirely in your browser; no data leaves the page.
The Digital Personal Data Protection Act, 2023 introduces consent as the default basis for processing personal data of Indian residents. For HR teams, three concrete shifts: offer letter clauses now need explicit consent language, exit processes must include data-retention disclosures, and applicant tracking has tighter rules.
Most HR functions touch DPDP-covered data continuously. The checklist captures the commitments that need to be confirmed annually.
Run through the fourteen items with your DPO and HR lead. Each item references the DPDP provision it addresses, so any disagreement on interpretation is grounded in the act's text.
Sign and archive at the end of each audit cycle. The archived output is what gets surfaced if the data protection board ever asks.
Items that are not yet aligned (typically: automated deletion endpoints, applicant-data renewal flows, vendor data-handling agreements) become the work plan for the coming quarter. Document the gap, the owner, and the target close date.
Defer is fine; undocumented defer is not. The checklist is the audit trail.
The act is notified; enforcement rules are still being finalised. Companies that wait for full enforcement will find themselves behind. Treat current compliance as the prudent baseline.
No. The checklist is a high-level readiness check, not a Data Protection Impact Assessment. For high-risk processing, a formal DPIA is still required.
Statutory retention varies: TDS records (7 years), PF records (lifetime of employment plus 7), POSH complaints (10 years). For non-statutory data, the consent-specified period applies. See our DPDP explainer for the full picture.
Annually as a minimum, ideally aligned with the financial-year audit cycle. Major HR-tech changes (new HRMS, new ATS, new BGV vendor) should trigger an interim run.
Join the waitlist and try pPULSE the moment your slot opens, or talk to us about a custom rollout for your team.
Clear per person pricing. No surprise setup or onboarding fees.
See pricing detailsMessage sent
Thanks. We reply by email, usually within a working day.