Scope and law
Does DPDP apply to our activities?
Establish the people, processing and geography before reaching a conclusion about scope.
How it works →DECISIONS
Make the decision before choosing the service.
Plain explanations, useful questions and a next step for each decision.
People and support
Do we need a formal DPO or advisory support?
Separate a legal appointment question from the practical need for someone to coordinate privacy work.
How it works →Choices and processes
What consent arrangements do we actually need?
Decide the purpose and processing ground, then make the choice and follow-through work.
How it works →People and support
Should we hire, use external support or combine both?
Match the working arrangement to the decisions, recurring volume and internal capacity.
How it works →Scope and law
Which law, standard or assurance objective comes first?
Name the reason for the work before choosing a framework label.
How it works →Getting started
What should we do first?
Resolve material uncertainty, assign an owner and test a small number of important workflows.
How it works →Getting started
Do we need a gap review before implementation?
Use a review to resolve uncertainty; avoid repeating discovery when the issue and remedy are already clear.
How it works →Getting started
Who should carry out privacy improvements?
Break the work into decisions, documents, process changes and technical tasks.
How it works →Scope and cost
What determines the cost of privacy support?
Estimate the actual work and responsibilities before choosing a commercial model.
How it works →People and support
Do we need ongoing support or a defined project?
Look at the work that continues after the initial priorities have been addressed.
How it works →Do I need a DPO?
Use the short checker to separate notification questions, overseas activity and practical privacy ownership.
Open the DPO checker