AGREEMENT SUMMARY

DPDP Act 2023 Implementation Checklist

Step-by-step implementation guide for DPDP Act 2023 compliance including Section 8 obligations, consent management, breach notification procedures (72-hour timeline), Data Principal rights handling, and May 2027 enforcement readiness.

MTA-DPDP-IMPLVisibility: public

When to Use

Reference document for all engagements involving personal data processing. Required for DPDP readiness assessments.

Primary Use

Comprehensive compliance checklist for DPDP Act 2023 implementation covering all data fiduciary obligations.

Key Clauses

→Data Fiduciary accountability for all processing including by processors
→Valid processor contracts (DPAs) with Supabase, Razorpay, AI tools, etc.
→Free, specific, informed, unconditional consent with clear affirmative action
→Breach notification to DPB within 72 hours with detailed report
→Data Principal rights: access, correction, erasure, grievance redressal
→Erasure when consent withdrawn or purpose served (unless legal retention)
→Published business contact and grievance mechanism
→2-year audit trail of consents required

Governing Laws

DPDPA, 2023DPDP Rules, 2025IT Act, 2000Indian Contract Act, 1872

Companion Agreements

MTA-DPAMTA-DPDP-BREACHMTA-CERT-IN

Access Model

Template Distribution

Public summaries are provided here. Full templates are shared only through request-and-review workflow.

View legal hub matrix →

REQUEST TEMPLATES

Restricted Access Workflow

Templates are shared after manual verification to protect confidential and client-sensitive legal structures.

Name *Email *

Company

Requested Documents *

Use Case *

I confirm this request is for legitimate evaluation or onboarding and I agree to MTA processing this submission for document access review.I acknowledge MTA may retain this request as an access-control and compliance record.

MTA