Compliance · International & Privacy
Reasonable security safeguards, evidenced.
The obligation
What DPDP Act asks of you.
India's Digital Personal Data Protection Act 2023 is the connective privacy layer sitting underneath nearly every other Indian framework on this site — BFSI, fintech, healthcare, and government orgs all handle personal data covered by it regardless of their sector-specific regulator. The Act requires valid consent for processing, "reasonable security safeguards" against breach, and breach notification to both affected individuals and the Data Protection Board of India, with obligations tightening further for organizations the government designates as Significant Data Fiduciaries.
How TriNetra maps to it
TriNetra treats DPDP obligations as a cross-cutting layer rather than a standalone engagement type — CCV maps "reasonable security safeguards" against concrete, testable controls (encryption, access management, breach-detection tooling) shared with whatever sector-specific framework also applies.
A BFSI client's RBI-driven controls and DPDP obligations are evidenced from the same continuous testing program instead of two disconnected efforts, and DRP's leaked-credential monitoring surfaces incidents involving your domains early — directly relevant when breach-notification clocks start ticking.
Keep evidence current between audits with Continuous Controls Validation.
Ready when you are
Bring your framework. Leave with a plan.
Tell us which regulators govern you. We'll show you — on live platform data — exactly which modules produce the evidence each one asks for.