DPDP Workshop: Essential Document Checklist for Indian Biz
Prepare for your DPDP Workshop with this checklist of essential documents. Understand what data and policies MBS needs for effective compliance.
What Documents Are Needed for a DPDP Workshop?
You don't need to gather an exhaustive list of documents before starting a DPDP Workshop with Meridian Bridge Strategy. However, having access to key internal policies, data inventories, and vendor agreements will significantly accelerate the process. The workshop itself is designed to help you identify and map these details.
Sushant Pasamarty, founder of Meridian Bridge Strategy, emphasizes that the most critical 'document' you need is internal access to stakeholders across various departments. These individuals hold the institutional knowledge about how personal data flows through your organization.
What This Means Right Now for Indian Businesses
While the enforcement timeline for the Digital Personal Data Protection Act (DPDP Act) is still being finalized, the practical reality is that businesses need to act now. Preparing for a DPDP Workshop isn't about perfectly compiling everything beforehand, but understanding what information will be reviewed and analyzed. This proactive approach helps your business avoid penalties and build trust with data principals.
The DPDP Act will require transparent data processing practices. Having a clear understanding of your data landscape, facilitated by the workshop, will be key to demonstrating compliance when enforcement begins. The output of the workshop is a 90-day roadmap, so starting early helps you execute it fully.
What You Actually Need to Do (And What We'll Help You Discover)
The DPDP Workshop process with Meridian Bridge Strategy is structured to systematically uncover and document your personal data handling practices. While you don't need to have these perfectly compiled, knowing where to find them or who to ask is essential. Here are the core areas of information we'll be working with:
- Data Inventory & Flow Information: We will map every personal data flow. This involves understanding who collects data (e.g., website forms, HR onboarding), what data is collected, where it is stored (servers, cloud services), and with whom it is shared (vendors, third parties). Having an existing, even informal, inventory or knowing the responsible teams will be helpful.
- Existing Privacy Policies & Terms of Service: Your current public-facing privacy policy, terms of service, and any internal data handling policies are crucial starting points. We will analyze these against DPDP requirements to identify gaps in transparency and consent mechanisms.
- Vendor & Third-Party Agreements: We need to review agreements with any third-party vendors (e.g., cloud providers, marketing agencies, analytics tools) that process personal data on your behalf. These Data Processing Agreements (DPAs) are critical for establishing accountability under DPDP.
- Consent Mechanisms & Forms: Examples of how you obtain consent from data principals (e.g., website consent banners, sign-up forms, HR consent forms) are vital. We'll evaluate if these methods meet the 'free, specific, informed, unconditional, and unambiguous' criteria of DPDP.
- Grievance Redressal & Data Subject Request (DSAR) Processes: Information on how data principals currently raise concerns or request access, correction, or deletion of their data is important. If you have no formal process, the workshop will help design one.
What It Costs (Mapped to MBS Tiers)
The extent to which you need to proactively gather documents often aligns with the specific MBS productized service you choose. The deeper the engagement, the more comprehensive the data review.
| Tier | What it includes | Price Range | Document Focus |
|---|---|---|---|
| Data Mapping | Map every personal data flow: who collects it, where it goes, which vendors touch it | ₹1.5L – ₹3L | Focus on identifying data sources, flows, and vendor touchpoints. Less about policy review, more about raw data movement. |
| DPDP Readiness Audit | Data Mapping + Gap Analysis (consent, DPAs, grievance, breach, deletion) | ₹2L – ₹6L | Includes Data Mapping. Adds review of existing policies, consent mechanisms, vendor agreements (DPAs), and incident response plans. |
| DPDP Workshop | Data Mapping + Gap Analysis + Prioritized Recommendations with a 90-day roadmap | ₹5L – ₹10L | Builds on Audit. Requires deep dives into all areas mentioned above, collaborating with your teams to identify gaps and build a practical roadmap. This is where comprehensive access to documentation and stakeholders is most beneficial. |
| Full DPDP Consulting | Workshop + Implementation Support + DPO Training + Final Readiness Opinion | ₹7L – ₹12L | Includes the Workshop. Requires ongoing access to all internal documents, systems, and personnel for implementation and training phases. |
When to Start Your DPDP Workshop Preparation
Begin identifying your key data stakeholders and existing policies as soon as possible. Even if you don't have everything perfectly organized, knowing who holds what information within your company is the most valuable preparation. This allows the MBS team, led by Sushant Pasamarty, to hit the ground running during the workshop.
Sushant, with his background in identity verification and cybersecurity at companies like IDfy and CyberArk, designed these workshops to be efficient. The less time spent identifying basic information, the more time dedicated to strategic recommendations and roadmap development.
Next Step: Calculate Your DPDP Compliance Cost
Understanding what documents are needed is the first step. The next is to understand the investment required. Use our free DPDP compliance cost calculator to estimate which MBS service tier aligns best with your needs. Then, book a consultation with Sushant to discuss your specific context and kickstart your DPDP readiness journey.
Frequently Asked Questions
Do I need to have a complete data inventory before starting a DPDP Workshop?
No, a complete data inventory is not required. The Data Mapping component of the DPDP Workshop is specifically designed to help you create this inventory by identifying all personal data flows within your organization.
What if my company doesn't have formal privacy policies or vendor agreements?
Even without formal documents, the DPDP Workshop will help you identify existing practices and create the necessary policies and agreements. We will work with your teams to understand current data handling and draft compliant frameworks.
Who within my organization should provide these documents for the workshop?
Access to key stakeholders from various departments (e.g., Legal, HR, IT, Product, Marketing) is more important than a single document provider. These individuals collectively hold the information needed to map data flows and understand current practices. Sushant and MBS will guide the conversations.
Related Guides
DPDP Compliance: Mandatory for Indian Startups?
See the likely DPDP cost for compliance: Mandatory for Indian Startups? Get the quick range, cost drivers, and next step. Use the free calculator to plan yo...
DPDP Fines for Small Businesses: What You Need to Know
See the likely DPDP cost for fines for Small Businesses: What You Need to Know. Get the quick range, cost drivers, and next step. Use the free calculator to...
DPDP Act: Foreign Companies in India – Guide by MBS
See the likely DPDP cost for act: Foreign Companies in India – Guide by MBS. Get the quick range, cost drivers, and next step. Use the free calculator to pla...
Check Your DPDP Cost
Use the free calculator to estimate your compliance cost. Then book a call with Sushant to scope the right engagement.
Estimate My DPDP Cost →