PineBrook Logo IconPineBrook Technologies

DPDPA, built into how you handle data

We map your data, build the controls, and keep them working, for every sector and every size of organisation.

Start quick readiness check

The lifecycle of personal data

  1. 1
    Collect
    Tell people what you take, and why.
  2. 2
    Use
    Only for the purpose they agreed to.
  3. 3
    Store
    Secured, with a clear retention limit.
  4. 4
    Share
    Vendors and partners, under contract.
  5. 5
    Delete
    On schedule, or when someone asks.

What the DPDPA asks of you

The Digital Personal Data Protection Act, 2023 sets rules for how organisations in India collect, use, store and share personal data. It gives people rights over their data and gives organisations duties: ask clearly, use data only for the stated purpose, protect it, and delete it when it is no longer needed.

  1. 01

    Consent, in most cases

    Clear notice and a real choice before you collect. The Act allows some uses without consent.

  2. 02

    Rights requests

    People can ask to see, correct or erase their data, raise a complaint, and nominate someone to act for them.

  3. 03

    Security safeguards

    Reasonable controls that protect data from breaches.

  4. 04

    Breach notice

    Tell the Data Protection Board and affected people if data is exposed.

Start from where you are

Pick your sector, your size, or your role. Each path ends at the same three services.

By sector

HealthcareBFSIEdTechE-commerceSaaS and ITMore

The same Act lands differently in a hospital and a bank. See what changes for yours.

By organisation

Startups and MSMEsMid-marketEnterprises

What applies to you depends on your size and on how much data you hold.

By role

DPO and privacyLegalIT and securityProduct

Guides for the people who carry the work, with a checklist for day one.

Three stages, one thread

We don't stop at a report. We map your data, build the controls, then keep them working.

  1. Consulting

    Know where you stand
    • Data mapping and gap assessment
    • Notice and consent audit
    • Vendor risk baseline

  2. Implementation

    Fix it, safely
    • Consent flows in your product
    • Rights requests and deletion
    • Retention and access controls

  3. Governance

    Keep it working
    • DPO support and periodic reviews
    • Breach response runbooks
    • Ongoing vendor monitoring

Check your readiness.

Questions across five areas. You get a tier and a short list of gaps.

Data discovery
Consent
Rights requests
Security
Vendors
QUESTION 1 OF 10DATA DISCOVERY

Do you keep a record of what personal data you collect, and why?

Your answers stay in this browser and are not sent to us. Booking a walkthrough asks for your consent first.

See where you stand in a minute

Start quick readiness check