DPDP Review · Reading library
Privacy evidence journal
Practical reading on privacy evidence, vendor questions and the limits of a compliance claim.
12 articles · Research cutoff 22 October 2026 · Published 3 November 2026. Each article has one main publishing site, visible references and related reading.
Rights and grievances
DPDPHQ · DPDP Review · 4 min read
Identity checks for privacy requests without demanding too much
Verify privacy requests with proportionate checks, using existing account context where suitable and avoiding unnecessary identity documents or disclosures.
Governance and accountability
DPDPHQ · DPDP Review · 4 min read
A useful data protection impact assessment starts with the workflow
Start a data protection impact assessment with a real processing journey, then examine individual consequences, alternatives, safeguards and unresolved decisions.
DPDPHQ · DPDP Review · 4 min read
A privacy audit should test evidence, not the length of a policy
Plan a privacy audit around sampled workflows, reliable evidence and corrective action, while distinguishing SDF data-audit duties from voluntary assurance work.
Retention and deletion
DPDPHQ · DPDP Review · 4 min read
What a deletion certificate from a vendor should explain
Evaluate a vendor deletion certificate by checking scope, systems, backups, exceptions and evidence, so its wording matches what was actually removed.
Vendors and transfers
DPDPHQ · DPDP Review · 4 min read
The privacy questions to ask before buying a SaaS tool
Ask practical privacy questions before buying SaaS, covering purposes, access, vendors, data movement, incidents and the ability to leave with clear evidence.
DPDPHQ · DPDP Review · 4 min read
What belongs in a practical data processing agreement
Build a practical processor agreement around instructions, safeguards, incidents, requests, retention and exit, while distinguishing required law from drafting advice.
DPDPHQ · DPDP Review · 4 min read
What to ask when a vendor says it is DPDP compliant
Turn a vendor’s broad compliance claim into specific questions about scope, evidence, legal timing and responsibilities.
Retail and local businesses
DPDPHQ · DPDP Review · 4 min read
CCTV at a small business: plan the digital data trail
Map the complete digital CCTV trail, including viewing, exports and retention, before choosing a camera setup or policy.
Employment and service sectors
DPDPHQ · DPDP Review · 4 min read
Apartment societies and visitor apps: ask who needs each field
Assess visitor registration field by field and clarify the society, resident and app provider roles in the data flow.
AI and product decisions
DPDPHQ · DPDP Review · 4 min read
A privacy review for a new product experiment
Make a product experiment review end with a clear launch decision, bounded data collection and a plan for failure.
Operations and measurement
DPDPHQ · DPDP Review · 4 min read
Choosing a privacy tool when your processes are still evolving
Choose a privacy tool by the workflow it can demonstrate and the decisions your organisation is ready to operate.
Interpretation and common mistakes
DPDPHQ · DPDP Review · 4 min read
What privacy software can prove, and what still needs judgment
Evaluate the evidence a privacy tool produces while preserving human responsibility for purpose, scope and legal conclusions.