Consulting: know where you stand
A DPDPA gap assessment shows what personal data you hold, where it goes, and which duties you are not yet meeting. You leave with a prioritised roadmap, not a binder.
What we do
Data mapping
Every system, form and vendor that touches personal data, traced from collection to deletion.
Notice and consent audit
We read your notices and consent flows the way the Act does, and mark what needs to change.
Vendor risk baseline
Which processors hold your data, under what contract, and where the gaps are.
Gap assessment
Each duty under the Act scored against what you do today, ranked by risk and effort.
Four steps, in order
- 01
Scope
Agree which systems, teams and data are in.
- 02
Discover
Interviews, system reviews and data mapping.
- 03
Assess
Score each duty and rank the gaps.
- 04
Roadmap
A sequenced plan your team can act on.
A clear picture, and a plan
- A data map of systems, purposes and vendors
- A gap register, ranked by risk
- A roadmap into Implementation
- A briefing for leadership
Questions
It depends on how many systems and teams are in scope. We agree the scope first and give you a timeline in writing before work starts.
A sponsor, plus an owner for each main system: product or engineering, IT or security, legal or compliance, and whoever runs customer support.
No. We compare your practices with the duties in the Act and the Rules and give you a roadmap. Your legal counsel confirms the legal position.