Skip to content
CryonityLabs_
Security Assurance CR-ASR-102

Data Protection Readiness Review

A practical gap assessment against India's data protection law (DPDP Act, 2023), examining how consent is taken, how long data is kept, what your notices say and what follows a breach.

Timeline15 working days
Deliverables7 itemised
PracticeSecurity Assurance
Price₹24,999 incl. GST

01

The problem this solves

India's data protection law (DPDP Act, 2023) changes what a business must do with personal data, and most product teams have yet to map where theirs sits. We inventory it across the database, the analytics tools, the support inbox, the marketing platform, and the spreadsheets kept on people's own laptops, then weigh consent, retention and processor contracts against the Act. This is engineering-led work, not legal advice, and we mark where counsel is required.

02

What you receive

  1. An inventory of personal data across systems, vendors and storage
  2. Flow maps tracing collection, processing, sharing and deletion
  3. Obligations under the Act assessed, each gap given a severity
  4. Consent notices and capture reviewed, with replacement wording supplied
  5. A retention schedule proposed for each category of data
  6. A process for access, correction and erasure requests from data principals
  7. Breach notification procedure, plus a remediation plan with effort estimates

03

What changes afterwards

A clear picture of where personal data actually resides

Consent and retention you can stand behind rather than hope about

A ranked plan replacing a vague sense of exposure

04

Is it the right fit?

Ideal for

  • Indian businesses holding customer personal data at any volume
  • Products with Indian users widening what they collect
  • Teams whose privacy policy was copied off another site long ago

What we need from you

  • Short interviews with the people who own each system
  • The privacy policy as it stands, your vendor list and your consent screens
  • A senior person willing to own the remediation afterwards

05

Before you buy

Yes. It is in Indian rupees with 18% GST included, and it is exactly what you pay at checkout. Nothing is added afterwards for the scope listed on this page.

The working days are counted from the day we hold your payment, the completed brief and everything listed under “What we need from you”. If an input arrives late, the handover date moves by the same number of days.

Ask before you buy. We will confirm in writing whether it sits inside this scope, point you to a better-fitting service, or tell you it needs separate work.

On full payment, the code, configuration, designs and documents produced for this service belong to your organisation, as set out in our Terms.

Each unit repeats the listed scope once. It does not stretch a single unit to cover more.

Often considered alongside

All Security Assurance services
Security Assurance

Application Penetration Assessment

A manual penetration test of the web application, each finding backed by proof-of-concept evidence, with a retest once your fixes land.

12 working days

₹32,999GST included

Security Assurance

Credential Hygiene Sprint

Credentials sitting in your repositories located and rotated, with scanning put in place so fresh ones stop arriving.

6 working days

₹13,999GST included

Security Assurance

Cloud Identity Review

Every identity in the cloud account measured against what it has actually used, with excessive roles trimmed back without breaking anything.

10 working days

₹20,999GST included

Data Protection Readiness Review ₹24,999