Service Guide5 min read

DPDP Workshop: Full Deliverables & Cost (MBS Guide)

Understand what Meridian Bridge Strategy's DPDP Workshop includes, from data mapping to a 90-day roadmap, and its cost (₹5L – ₹10L).

SP
Sushant Pasumarty

DPDP Workshop: Full Deliverables Breakdown

The DPDP Workshop from Meridian Bridge Strategy (MBS) is a comprehensive service designed to move your organisation beyond initial assessments to actionable compliance. Priced between ₹5L – ₹10L, this engagement provides a clear, prioritised roadmap for Data Protection and Digital Personal Data Protection Act (DPDP) readiness.

Sushant Pasamarty, founder of Meridian Bridge Strategy, developed this workshop to deliver tangible outcomes. It combines meticulous data mapping, a thorough gap analysis, and a strategic plan tailored to your business operations.

What the DPDP Workshop Covers in Detail

The DPDP Workshop builds upon our foundational services, integrating Data Mapping and a full DPDP Readiness Audit. This ensures all prior steps are completed and validated before moving to strategic recommendations.

1. Data Mapping (Included)

This initial phase systematically identifies and documents every instance of personal data processing within your organisation. It answers critical questions about data flows.

  • Data Identification: Pinpointing all types of personal data collected, stored, processed, and transmitted.
  • Data Flow Documentation: Mapping the journey of personal data from collection to deletion, across all systems and departments.
  • Vendor Analysis: Identifying all third-party vendors who touch personal data, including their roles and responsibilities.
  • Legal Basis Assessment: Determining the lawful basis for processing each category of personal data.

At the lower end of the ₹5L – ₹10L range, the data mapping scope will be more focused on core data flows. For complex organisations with diverse data sets and numerous vendors, the effort, and thus the cost, increases towards the higher end.

2. DPDP Readiness Audit (Included)

Following data mapping, the readiness audit identifies specific compliance gaps based on the DPDP Act. This audit checks your current state against mandatory DPDP requirements.

  • Consent Management Review: Evaluating current consent mechanisms for DPDP compliance, including explicit, informed, and easily withdrawable consent.
  • Data Processing Agreement (DPA) Assessment: Reviewing existing contracts with data processors to ensure they meet DPDP requirements for data protection obligations.
  • Grievance Redressal Mechanism Evaluation: Assessing the effectiveness and compliance of your current system for handling data principal requests and complaints.
  • Breach Notification Protocol Check: Examining existing data breach response plans against DPDP 72-hour notification requirements.
  • Data Deletion & Retention Policy Review: Verifying policies and procedures for data retention limits and secure deletion processes.

A simpler business model will involve fewer gaps and a quicker audit process. A complex operational setup, with varied data processing activities, will require more extensive gap analysis, influencing the cost within the ₹5L – ₹10L bracket.

3. Prioritised Recommendations with a 90-Day Roadmap

This is the core differentiator of the DPDP Workshop. Sushant Pasamarty and the MBS team translate audit findings into a clear, actionable plan. You receive a structured approach to achieve compliance.

  • Gap Prioritisation: Ranking identified compliance gaps based on risk level, impact, and ease of implementation.
  • Actionable Recommendations: Providing specific, practical steps to address each prioritised gap, including policy updates, process changes, and technology considerations.
  • 90-Day Implementation Roadmap: A phased plan outlining key milestones, responsible parties, and estimated timelines for achieving critical compliance objectives within the next three months.
💡 Key Insight: The DPDP Workshop provides a practical action plan. It tells you not just 'what' is wrong, but 'how' to fix it, with clear steps for immediate impact.

What You Walk Away With

Upon completion of the DPDP Workshop, you will have concrete deliverables that guide your ongoing compliance efforts:

  • Comprehensive Data Flow Maps: Visual representations of personal data movement within your organisation.
  • Detailed Gap Analysis Report: A document outlining specific non-compliance areas against DPDP requirements.
  • Prioritised Recommendation List: A ranked list of actions needed, with clear descriptions for each.
  • Customised 90-Day DPDP Roadmap: A phased plan for implementation, detailing tasks, owners, and deadlines.
  • Executive Summary Presentation: A high-level overview of findings and the roadmap for your leadership team.

Who This is For

The DPDP Workshop is ideal for Indian founders, CXOs, CTOs, HR heads, and compliance officers who:

  • Have a basic understanding of DPDP and recognise the need for proactive compliance.
  • Require a clear, actionable plan beyond just identifying gaps.
  • Need a structured approach to allocate resources and track progress for DPDP readiness.
  • Are looking for expert guidance to translate complex legal requirements into practical business actions.
  • Value a defined scope and timeline for their compliance efforts.
✅ Pro Tip: If your organisation handles significant volumes of personal data or operates in a regulated industry, the DPDP Workshop offers a robust framework to initiate your compliance journey effectively.

What It Costs (MBS Tier Mapping)

The DPDP Workshop is a standalone productized service offered by Meridian Bridge Strategy.

Service TierWhat it IncludesPrice RangeDuration
Data MappingMap every personal data flow: who collects it, where it goes, which vendors touch it₹1.5L – ₹3L1-2 weeks
DPDP Readiness AuditData Mapping + Gap Analysis (consent, DPAs, grievance, breach, deletion)₹2L – ₹6L2-4 weeks
DPDP WorkshopData Mapping + Gap Analysis + Prioritized Recommendations with a 90-day roadmap₹5L – ₹10L4-6 weeks
Full DPDP ConsultingWorkshop + Implementation Support + DPO Training + Final Readiness Opinion₹7L – ₹12L3-6 months

The duration and cost within the ₹5L – ₹10L range depend on your organisation's size, data complexity, number of data processing activities, and the maturity of existing privacy practices.

What It Does NOT Include (Setting Expectations)

While comprehensive, the DPDP Workshop has a defined scope:

  • Implementation Support: This service delivers the roadmap, but active support in executing the recommendations (e.g., drafting new policies, configuring systems) is part of the Full DPDP Consulting tier.
  • Ongoing DPO Services: The workshop does not include acting as your designated Data Protection Officer (DPO) or providing continuous DPO functions.
  • Legal Advice: MBS provides strategic and operational guidance, but we are not a law firm. Specific legal interpretations or opinions should be sought from qualified legal counsel.
  • Software Development/Configuration: While recommendations might include technology solutions, the workshop does not cover the actual development or configuration of software systems.

For more detailed support, consider the Full DPDP Consulting service, which builds on the Workshop deliverables.

Next Step

Understanding your specific needs is the first step. Our free online calculator can help you estimate which DPDP service tier best fits your organisation's requirements. From there, you can schedule a focused discussion with Sushant Pasamarty to refine your scope.

Frequently Asked Questions

What is the key difference between the DPDP Readiness Audit and the DPDP Workshop?

The DPDP Readiness Audit identifies compliance gaps. The DPDP Workshop includes the audit but goes further by providing prioritised recommendations and a concrete 90-day roadmap for addressing those gaps. It's about moving from 'what' to 'how'.

How long does a typical DPDP Workshop engagement take with MBS?

A DPDP Workshop engagement typically takes between 4-6 weeks. The exact duration depends on the complexity of your organisation's data landscape and the scope of personal data processing activities.

Will the 90-day roadmap from the DPDP Workshop be specific to my business?

Yes, the 90-day roadmap is customised specifically for your organisation. It incorporates your unique data flows, identified gaps, risk profile, and operational constraints to provide practical, actionable steps relevant to your business.

Related Guides

Talk to Sushant About Your DPDP Needs

Book a 30-minute call to discuss your compliance requirements and get a clear next step.

Book a Call with Sushant →