A starting point

DPDP Readiness Scan

Find out where you stand on personal data before it becomes a problem. Data, consent and notices reviewed, with the top fixes in one written report.

  • Set with you at the start
  • 6 deliverables
  • Ends in a written report
Sample layout, not real findings DPDP Readiness Scan report

Prepared for: yourbusiness.com

Summary
What we looked at
  1. A map of where personal data enters, moves and rests in your systemsFix first
  2. A review of your privacy notice and consent flowsFix first
  3. A check of how cookies and trackers are set upPlan
  4. A look at how data access, correction and erasure requests would be handledPlan
  5. A list of the suppliers and data processors that handle personal data for youFine
Next steps, in priority order
The report is short and written in plain words. Ratings above are placeholders to show the layout.

What you get

What you receive

Agreed before we start, so you know exactly what is covered. You choose the pace. We agree the schedule with you at the start.
dpdp-readiness-scan.deliverables6 items
  • A map of where personal data enters, moves and rests in your systems
  • A review of your privacy notice and consent flows
  • A check of how cookies and trackers are set up
  • A look at how data access, correction and erasure requests would be handled
  • A list of the suppliers and data processors that handle personal data for you
  • The top fixes in priority order, in a short written report
The report is yours to keep, whatever you decide next.

How it works

Three steps, then you decide

  1. Tell us what is worrying you

    Write a few lines or book a short call. Share the site, system, quote or idea you want looked at.

  2. We agree the scope with you

    A person on the team replies to agree what is covered. The work is fixed and written down before it starts, and you choose the pace.

  3. You get a short written report

    Plain words, fixes in priority order. It is yours to use with us or with anyone else.

Where it can lead

If you want to go further

The report often points to work in one of these disciplines. You decide whether, when and with whom.

Read more

The detail

The DPDP Readiness Scan is for any business that collects personal data and wants to know where it stands under the Digital Personal Data Protection Act, 2023. Customer details usually sit in forms, spreadsheets, a CRM and a few tools nobody remembers signing up for. You walk away with a map of that data, a review of your consent and notices, and a short written report with the top fixes.

What does TechSum do, and what does counsel do?

We implement. Partner counsel advises on legal interpretation. The scan looks at what your websites, apps and systems actually do with personal data, and what we would change on the technical side. If the findings raise a question about what the Act requires of you, we bring in counsel for that part.

What does the DPDP Readiness Scan look at?
  • Personal data. What you collect, through which forms and systems, where it is stored and who can see it.
  • Notices and consent. Whether your privacy notice is clear and whether consent is asked for properly, including cookies and trackers.
  • Rights requests. Whether someone could ask to see, correct or erase their data, and whether you could respond.
  • Suppliers. Which outside tools and data processors (companies that handle data on your behalf) receive personal data from you.
  • Breach readiness. Whether you would know quickly if personal data were lost or stolen, and who would act.
How does the scan run?

We ask for the websites and systems in scope and a conversation with whoever knows how data moves in the business. We review, map and test what we can see, and write it up. The price is fixed and agreed before we begin.

What do you walk away with?

A short written report. It maps your personal data, notes what is already in good shape, lists what needs fixing and puts the fixes in priority order, with plain explanations a non-technical owner can follow.

What happens after the scan?

The scan leads into Trust, Security & Compliance, starting with DPDP Act compliance: consent and notice systems, rights workflows, retention and deletion, and breach readiness. If you want ongoing reviews afterwards, a Care Retainer or Managed Services can carry that.

Is this right for you?

It suits businesses at the start of the question, before they have a plan. If you only want a general site review, the Digital Health Check covers DPDP basics alongside speed, security and SEO. Ready for a first look? Start with the scan.

FAQ

Questions we get asked

What is the DPDP Act?

It is the Digital Personal Data Protection Act, 2023, India's law on how personal data is collected, used and protected. It affects most businesses that hold customer, user or employee data.

Is the scan legal advice?

No. We look at how your systems actually handle personal data and tell you what we would change. Partner counsel advises on legal interpretation and on what the Act requires of your business.

Is the scan a certificate or an audit?

No. It is a first look and a plan. It tells you where you stand and what to fix first, so the full readiness work can be scoped properly.

Who should do this?

Any business with a website, an app, a CRM or customer records. If you collect names, phone numbers or emails, personal data is already in your systems.

Let's Talk

Start with the DPDP Readiness Scan

Tell us a little about your business and what you want looked at. A person on the team will reply to agree the scope and when to begin, and will tell you if a smaller step would do.
  • A reply from a person on the team
  • Or book a short call
  • We say so if another team suits you better

Write to us in plain words

We use your details only to reply to you. Privacy notice

contact@techsum.digital WhatsApp

Or book a short call

Pick a time that suits you. You will speak with the people who would do the work.

Loading the calendar.Open the booking page