DPDP Workshop Prep: Your Essential Readiness Checklist

DPDP Workshop Prep Checklist: Get Ready for Compliance

Preparing for a DPDP Workshop effectively reduces friction and accelerates your compliance journey. This checklist outlines the key actions, owners, and timeframes needed to maximize the value of your workshop and streamline your path to DPDP readiness.

Sushant Pasamarty, founder of Meridian Bridge Strategy (MBS), emphasizes that structured preparation ensures the workshop delivers precise, actionable recommendations tailored to your organization.

Your DPDP Workshop Preparation Checklist

1. Phase 1: Initial Data Discovery & Team Assembly (1-3 Days)
   1. Identify Data Fiduciary & Data Processor Roles:
      
      • Action: Clarify if your organization acts as a Data Fiduciary (determines purpose and means of processing) or Data Processor (processes data on behalf of a Fiduciary).
      • Owner: Legal Head/Compliance Officer
      • Time Estimate: 1 day
      • External Cost (if needed): Minimal, part of Data Mapping (₹1.5L – ₹3L)
   2. Identify Key Stakeholders:
      
      • Action: Assemble a core team including representatives from Legal, IT/InfoSec, HR, Marketing, Product, and Customer Service.
      • Owner: CXO/Founder
      • Time Estimate: 0.5 day
      • External Cost (if needed): None
   3. Gather Existing Privacy Policies & Terms of Service:
      
      • Action: Collect all current internal and external-facing privacy notices, consent forms, and data usage policies.
      • Owner: Legal Head
      • Time Estimate: 1-2 days
      • External Cost (if needed): Minimal, part of DPDP Readiness Audit (₹2L – ₹6L)
2. Phase 2: Data Inventory & System Mapping (3-7 Days)
   1. List All Personal Data Categories Collected:
      
      • Action: Document every type of personal data your organization collects (e.g., name, email, phone, location, biometrics, financial info).
      • Owner: Product Head/CTO
      • Time Estimate: 2-3 days
      • External Cost (if needed): Included in MBS Data Mapping (₹1.5L – ₹3L)
   2. Map Data Collection Points & Purposes:
      
      • Action: For each data type, identify where and how it's collected (website forms, app, physical forms, third-party sources) and for what specific purpose.
      • Owner: Product Head/CTO
      • Time Estimate: 2-4 days
      • External Cost (if needed): Included in MBS Data Mapping (₹1.5L – ₹3L)
   3. Identify Data Storage Locations & Systems:
      
      • Action: List all databases, servers, cloud services, and physical locations where personal data is stored.
      • Owner: CTO/InfoSec Head
      • Time Estimate: 2-3 days
      • External Cost (if needed): Included in MBS Data Mapping (₹1.5L – ₹3L)
   4. Document Data Flows (Internal & External):
      
      • Action: Track how personal data moves within your organization and with all third-party vendors, partners, and service providers.
      • Owner: CTO/Compliance Officer
      • Time Estimate: 3-5 days
      • External Cost (if needed): Included in MBS Data Mapping (₹1.5L – ₹3L)
   5. Compile List of Third-Party Vendors Handling Personal Data:
      
      • Action: Create a comprehensive list of all vendors (e.g., CRM, HRIS, analytics, payment gateways) that process personal data on your behalf.
      • Owner: Legal Head/Procurement
      • Time Estimate: 1-2 days
      • External Cost (if needed): Included in MBS Data Mapping (₹1.5L – ₹3L)
3. Phase 3: Initial Gap Identification & Readiness Assessment (1-2 Days)
   1. Review Existing Consent Mechanisms:
      
      • Action: Assess if current consent collection (e.g., checkboxes, opt-ins) meets DPDP requirements for specificity, clarity, and revocability.
      • Owner: Product Head/Legal Head
      • Time Estimate: 1 day
      • External Cost (if needed): Included in MBS DPDP Readiness Audit (₹2L – ₹6L)
   2. Identify Current Data Principal Request Handling Process:
      
      • Action: Document how your organization currently handles requests for data access, correction, or deletion.
      • Owner: Customer Service Head/HR Head
      • Time Estimate: 0.5 day
      • External Cost (if needed): Included in MBS DPDP Readiness Audit (₹2L – ₹6L)
   3. Assess Data Breach Notification Procedures:
      
      • Action: Review existing protocols for identifying, containing, assessing, and notifying authorities/individuals in case of a data breach.
      • Owner: InfoSec Head/Compliance Officer
      • Time Estimate: 1 day
      • External Cost (if needed): Included in MBS DPDP Readiness Audit (₹2L – ₹6L)

What Does This Preparation Cost? DIY vs. MBS Services

Undertaking this preparation internally requires significant time and resource allocation. For smaller teams, or those lacking specific DPDP expertise, outsourcing key parts can be more efficient and accurate. Sushant Pasamarty founded MBS to provide structured, predictable DPDP compliance support.

Meridian Bridge Strategy offers services that align with these preparation phases, ensuring you don't miss critical steps. For example, our Data Mapping service covers all aspects of Phase 2, while the DPDP Readiness Audit extends to Phase 3.

Next Step: Estimate Your Specific DPDP Cost

Understanding these preparation steps is crucial, whether you do them yourself or leverage MBS expertise. The calculator on dpdpworkshop.com helps you determine which MBS tier best fits your organization's specific DPDP compliance needs and budget.