DPDP Workshop Process: Step-by-Step with MBS

How the DPDP Workshop Works: Step by Step

The Digital Personal Data Protection (DPDP) Workshop from Meridian Bridge Strategy (MBS) is designed to move your Indian business from understanding the law to actionable compliance. Sushant Pasamarty, founder of MBS, leads this engagement to provide a clear path forward.

This service combines thorough data discovery with a deep dive into your current practices, culminating in a prioritized 90-day roadmap. It is a comprehensive service for businesses seeking a detailed plan for DPDP readiness, costing between ₹5L – ₹10L and typically completed in 4-6 weeks.

What the DPDP Workshop Covers in Detail

The MBS DPDP Workshop is a structured engagement that builds upon earlier stages of compliance, integrating data mapping and gap analysis. It's a hands-on process involving your key stakeholders.

1. Data Mapping (Value: ₹1.5L – ₹3L, 1-2 weeks):

   This foundational step involves a detailed inventory of all personal data your organization handles. We identify who collects data, where it's stored, and which third-party vendors access it. This includes personal data of customers, employees, and partners across all systems and processes.

   ✅ Pro Tip: Accurate data mapping is crucial. Without knowing what data you hold, compliance efforts are guesswork. This phase clarifies your entire data footprint.
2. DPDP Readiness Audit & Gap Analysis (Value: ₹2L – ₹6L, 2-4 weeks):

   Building on the data map, we conduct a comprehensive audit of your current data protection practices against DPDP requirements. This includes evaluating your consent mechanisms, Data Processing Agreements (DPAs), internal grievance redressal procedures, breach notification protocols, and data deletion policies. We pinpoint specific areas where your current operations fall short of DPDP compliance. For more details on this standalone service, see DPDP Readiness Audit: What You Get & Costs (MBS).

3. Prioritized Recommendations with a 90-Day Roadmap:

   This is the core deliverable of the Workshop. Based on the data mapping and gap analysis, Sushant Pasamarty and the MBS team develop a set of clear, actionable recommendations. These recommendations are prioritized based on risk, impact, and ease of implementation. The output is a specific 90-day roadmap tailored to your business, outlining the exact steps needed to address identified gaps.

   💡 Key Insight: The 90-day roadmap provides a practical sequence of tasks, assigning responsibilities and estimated timelines, enabling immediate action post-workshop.

What You Walk Away With: Specific Deliverables

Upon completion of the DPDP Workshop, your organization will possess tangible assets to drive compliance:

• Comprehensive Data Inventory: A detailed map of all personal data flows, categories, collection points, storage locations, and third-party access.
• DPDP Gap Analysis Report: A formal report identifying all compliance gaps against the DPDP Act, categorized by severity.
• Prioritized Action Plan: A clear, step-by-step list of recommendations, ranked by urgency and importance.
• Custom 90-Day Implementation Roadmap: A detailed, phased plan outlining who does what, by when, to achieve DPDP readiness within the next three months. This includes specific recommendations for consent form updates, DPA revisions, internal policy adjustments, and process changes.

Who This is For

The DPDP Workshop is ideal for Indian business founders, CXOs, CTOs, HR heads, and compliance officers who:

• Have identified data protection as a priority but need a structured plan.
• Seek not just an audit but actionable steps and a timeline for compliance.
• Want to understand their specific compliance gaps and how to address them.
• Are ready to commit internal resources to implement recommendations.

What it Costs: MBS Tier Mapping

The exact cost within this range depends on your organization's complexity, the volume of personal data processed, and the number of systems and vendors involved. Sushant Pasamarty ensures the scope is tailored to deliver maximum value for your investment.

What the DPDP Workshop Does NOT Include

To set clear expectations, it's important to understand what the DPDP Workshop does not cover:

• Direct Implementation: MBS provides the roadmap and recommendations, but the actual implementation (e.g., coding consent flows, updating privacy policies, deploying new systems) is your team's responsibility.
• Legal Advice or Representation: While based on legal understanding, MBS provides strategic and operational consulting, not legal advice. We recommend involving your legal counsel for final review of legal documents.
• Ongoing Monitoring or Maintenance: The workshop provides a snapshot and a path for 90 days. Continuous compliance monitoring and updates are an ongoing internal process.
• DPO Training: Specific, in-depth training for your designated Data Protection Officer (DPO) is part of our Full DPDP Consulting service, not the Workshop.

Next Step: Estimate Your Cost and Discuss with Sushant

Ready to get a clear plan for DPDP compliance? Use our online calculator to get an estimated cost tailored to your business. Afterwards, you can schedule a call with Sushant Pasamarty to discuss your specific needs and how the DPDP Workshop can benefit your organization.