DPDP Readiness Sprint · Fixed scope

DPDP Readiness Sprint.
4 weeks. ₹9 lakh. Fixed scope.

A focused engagement for Indian mid-caps who need to know, honestly, how ready they are for the Digital Personal Data Protection Act 2023 — and what to do first.

Duration: 4 weeksFixed price: ₹9,00,000Post-sprint: 60 days of support included
What's included
  • A 24-point control map aligned to the Digital Personal Data Protection Act 2023 (consent, notice, data principal rights, data fiduciary obligations, grievance redressal, breach notification, significant-data-fiduciary triggers, cross-border transfer posture).
  • A written gap report covering every control: where you are, the evidence we examined, and what is missing.
  • A prioritised remediation plan — sequenced by exposure, regulatory urgency and effort, with owners and timelines.
  • A board-ready summary (one document, plain language) that your audit or risk committee can act on.
  • 60 days of post-sprint support after delivery: clarifying questions, review of your first remediation outputs, and one follow-up working session.
Who it's for

Indian mid-caps (approximately 50–500 employees) with either a looming DPDP commitment — a customer or partner has asked, a board or audit committee has set a date, a regulator has written — or an internal readiness question that needs an honest answer from someone outside the organisation.

If your scale, system complexity, cross-border footprint or regulated-sector obligations exceed what a 4-week fixed scope can cover, we will say so before the sprint starts and propose the right alternative.

Timeline
Week 1

Discovery — stakeholder interviews, data-processing inventory, documentation review, scoping confirmed in writing.

Week 2

Assessment — 24-point control map walkthrough, evidence captured against each control.

Week 3

Remediation plan — prioritised actions, owners, timelines, dependencies, cost-to-close estimates.

Week 4

Delivery — gap report, remediation plan and board-ready summary handed over, enablement session with your team.

Deliverables
  • 24-point DPDP 2023 control map (annotated against your environment).
  • Gap report with evidence citations and severity ratings.
  • Prioritised remediation plan with owners and sequencing.
  • Board-ready summary (single document).
  • 60-day post-sprint support window, with a scheduled follow-up session.

We scope every sprint to your environment. If your scale or complexity needs a longer programme, we say so before the sprint starts.

Not a sprint candidate?

If you need a continuous programme — ongoing DPO support, cross-border transfer design, a significant-data-fiduciary posture review, or privacy engineering embedded in product work — the fixed-scope sprint is not the right fit. Our full advisory engagements cover that ground.

Explore Advisory & governance services →

Ready to find out? Book a 20-min discovery call. We will decide together whether the sprint is the right next step for you.

Book a 20-min discovery call ↗

Scope, deliverables and pricing are confirmed in writing before any engagement begins. The ₹9 lakh fixed price covers the 4-week sprint and 60-day post-sprint support described above — nothing else is implied.

Email services@secureline.in →