Compliance Strategist at ComplyZero
Advait Kapoor helps Indian businesses operationalize data protection. With experience in ISO 27001 audits, data mapping, and privacy program management, he focuses on the practical 'how' of DPDP - checklists, templates, data audits, and consent records. His writing is built for the DPO or founder who needs to get compliant, not just understand the law.
A practical guide to DPDP consent record-keeping: exactly what fields to capture, how long to retain them, and how to build a system that survives a Board inquiry.
A practical guide to DPDP data retention: Section 8(7) obligations, retention periods by data category, sectoral law conflicts, and a ready-to-use retention schedule framework.
A clause-by-clause guide to drafting DPDP-compliant Data Processing Agreements, with sample language, a GDPR comparison table, and common mistakes to avoid.
A practical, step-by-step methodology for auditing your personal data processing against DPDP Act requirements, with templates, time estimates, and common pitfalls.
India now has two parallel breach reporting regimes. Here is exactly what to report, to whom, and by when under the DPDP Act 2023 and CERT-In Directions.
A phased, 15-step DPDP compliance checklist with time estimates, Act section references, and practical guidance for Indian businesses targeting the May 2027 deadline.
