Independent DPDP educationSWARN is in development · educational, not legal adviceSource status: 30 Aug 2026

ARCHITECTURE LIBRARY · DECISION ROUTES

Trace a decision until the evidence answers back.

Create a browser-only list of public controls, layers and patterns to review. You can share the resulting URL, but no account, submission, finding or personal note is involved.

The URL stores only layer, control and pattern IDs. Browser-local owner notes are never read, copied or added to it.

BROWSER-ONLY REVIEW LIST

Choose the public records you want to review.

The selection stays in this browser until you share or print its public-ID URL. Malformed or unknown IDs are ignored. It is a reading aid—not a compliance score, legal mapping or evidence repository.

Architecture layers
Controls
L01Discovery and ownership6 controls
L02Notice and purpose6 controls
L03Choice and consent evidence6 controls
L04Rights and grievance operations6 controls
L05Retention and deletion6 controls
L06Processor and transfer governance6 controls
L07Security and breach response12 controls
L08Governance and assurance6 controls
Implementation patterns

ACCESSIBLE DEPENDENCY / EVIDENCE GRAPH · 08 × 07

Every layer follows the same accountable chain.

Tab through nodes or use arrow keys within a row. The semantic table contains the identical links, relationship text, source pointers and legal/status labels.

  1. Layer pathwayDiscovery and ownership
    1. 01 · PrerequisiteProcessing inventory ownership

      Establish processing inventory ownership before expanding the architecture boundary.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternProcessor and sub-processor register

      Link approved providers to instructions, data flows, locations, assurance and exit work.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest DISC-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactApproved inventory snapshot with a version and review date

      Primary retrievable output for discover; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, act-commencement-2025
    5. 05 · Failure modeA spreadsheet exists but nobody owns its accuracy

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, act-commencement-2025
    6. 06 · Research noteFrom obligation to evidence: the DPDP implementation stack

      Implementation teams benefit from separating legal interpretation from the engineering artefacts used to execute and test a decision. Radar context: Software and data-flow inventories is Adopt.

      Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026
    7. 07 · Specialist propertyImplementation pathways

      Explore implementation planning when the inventory is ready to drive work. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
  2. Layer pathwayNotice and purpose
    1. 01 · PrerequisiteInventory change gate

      Carry forward the reviewed evidence boundary from Discovery and ownership.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternVersioned notice registry

      Publish the right notice at the right collection surface and keep the rendered version reproducible.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest NOTICE-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactApproved notice version and itemised data-purpose pairs

      Primary retrievable output for explain; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    5. 05 · Failure modeA generic privacy policy substitutes for collection context

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    6. 06 · Research noteA source model for phased legal commencement

      Status should be computed from verified publication metadata and provision groups, while the original source and calculation basis remain visible. Radar context: Policy-as-code for source validation is Adopt.

      Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, dpdp-rules-2025, rules-corrigendum-2025
    7. 07 · Specialist propertyScenario learning

      Use scenario-led learning to examine how notice choices change with context. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
  3. Layer pathwayChoice and consent evidence
    1. 01 · PrerequisiteNotice archive

      Carry forward the reviewed evidence boundary from Notice and purpose.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternConsent event and withdrawal propagation

      Treat consent and withdrawal as versioned events that downstream systems must acknowledge.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest CONSENT-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactSynthetic consent-event schema and approved production schema

      Primary retrievable output for record; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    5. 05 · Failure modeA button click is stored without the notice or purpose context

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    6. 06 · Research noteConsent Managers as infrastructure: interfaces, accountability and open questions

      Interoperability, receipt semantics, revocation reliability and minimised identity binding deserve design attention before integration claims are made. Radar context: Structured consent receipts is Adopt.

      Editorial analysis · reviewed 2026-08-30 · sources dpdp-rules-2025, rules-landing-2025
    7. 07 · Specialist propertyComparative analysis

      Compare framework concepts without treating a comparison as legal advice. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
  4. Layer pathwayRights and grievance operations
    1. 01 · PrerequisiteConsent record retrieval

      Carry forward the reviewed evidence boundary from Choice and consent evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternData Principal request orchestration

      Coordinate identity risk, search, action, response and escalation without building a new data silo.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest RIGHTS-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactRequest state-transition history

      Primary retrievable output for respond; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    5. 05 · Failure modeIdentity checks collect more data than the request needs

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    6. 06 · Research noteWhat an evidence-producing rights workflow needs

      A case workflow should expose missing system acknowledgements and unresolved risk instead of equating a sent response with completed work. Radar context: Rights-request orchestration is Trial.

      Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026
    7. 07 · Specialist propertyEvidence review

      Examine how evidence quality and confidence can be reviewed without certification claims. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
  5. Layer pathwayRetention and deletion
    1. 01 · PrerequisiteRequest exercise record

      Carry forward the reviewed evidence boundary from Rights and grievance operations.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternRetention event engine

      Convert approved purpose and lifecycle events into scoped expiry work and verifiable outcomes.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest RET-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactApproved event-to-retention rule

      Primary retrievable output for expire; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    5. 05 · Failure modeA duration exists without a reliable start event

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    6. 06 · Research notePrivacy engineering for Indian MSMEs: where simplicity matters

      A small organisation can begin with named owners, a compact inventory and a few tested lifecycle paths while avoiding unsupported readiness claims. Radar context: Event-driven retention is Trial.

      Editorial analysis · reviewed 2026-08-30 · sources pib-rules-explainer-2025, pib-status-2026
    7. 07 · Specialist propertyPractical tools

      Explore practical tool concepts after the trigger and evidence design are understood. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
  6. Layer pathwayProcessor and transfer governance
    1. 01 · PrerequisiteRetention change log

      Carry forward the reviewed evidence boundary from Retention and deletion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternProcessor and sub-processor register

      Link approved providers to instructions, data flows, locations, assurance and exit work.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest PROC-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactProcessor and sub-processor register entry

      Primary retrievable output for govern; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    5. 05 · Failure modeA contract is stored without linking it to actual data flows

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    6. 06 · Research noteFrom obligation to evidence: the DPDP implementation stack

      Implementation teams benefit from separating legal interpretation from the engineering artefacts used to execute and test a decision. Radar context: Software and data-flow inventories is Adopt.

      Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026
    7. 07 · Specialist propertyImplementation pathways

      Move from the register into a reviewed implementation plan. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
  7. Layer pathwaySecurity and breach response
    1. 01 · PrerequisiteVendor exit evidence

      Carry forward the reviewed evidence boundary from Processor and transfer governance.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternBreach fact ledger and communication package

      Separate confirmed facts from hypotheses and generate consistent decision and communication evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest SEC-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactSafeguard decision and implementation record

      Primary retrievable output for protect; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    5. 05 · Failure modeA control name replaces a risk-based design decision

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    6. 06 · Research noteFrom obligation to evidence: the DPDP implementation stack

      Implementation teams benefit from separating legal interpretation from the engineering artefacts used to execute and test a decision. Radar context: Automated legal-text monitoring is Assess.

      Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026
    7. 07 · Specialist propertyNews and discourse signals

      Monitor external developments separately from the organisation’s own incident evidence. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
  8. Layer pathwayGovernance and assurance
    1. 01 · PrerequisiteBoard detail package

      Carry forward the reviewed evidence boundary from Security and breach response.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    2. 02 · Implementation patternSDF DPIA and audit evidence room

      Organise applicability, scope, findings and remediation without implying designation or certification.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    3. 03 · Validation / testTest CHILD-01

      Trace the sample from its trigger and owner through the implemented system to the retained evidence.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023
    4. 04 · Evidence artefactApplicability decision with source and facts

      Primary retrievable output for assure; inspect the full layer evidence set before drawing a conclusion.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    5. 05 · Failure modeA checklist score is presented as legal assurance

      A visible failure case keeps a completion label from hiding an evidence gap.

      Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025
    6. 06 · Research noteWhy a compliance score must show confidence and evidence type

      Assessment interfaces should separate requirement applicability, control design, implementation evidence and test confidence before summarising results. Radar context: Confidential-computing claims is Watch.

      Editorial analysis · reviewed 2026-08-30 · sources dpdp-act-2023, pib-status-2026
    7. 07 · Specialist propertyPrivacy talent pathways

      Explore role and talent pathways without invented qualifications or hiring claims. This route remains optional if the destination is unavailable.

      Contextual external property · no affiliation or availability implied
Open semantic relationship table (8pathways)
RecordPhaseRelationshipStatus / boundarySource pointers
Discovery and ownership01 · PrerequisiteProcessing inventory ownership

Establish processing inventory ownership before expanding the architecture boundary.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Discovery and ownership02 · Implementation patternProcessor and sub-processor register

Link approved providers to instructions, data flows, locations, assurance and exit work.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Discovery and ownership03 · Validation / testTest DISC-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Discovery and ownership04 · Evidence artefactApproved inventory snapshot with a version and review date

Primary retrievable output for discover; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, act-commencement-2025dpdp-act-2023 · act-commencement-2025
Discovery and ownership05 · Failure modeA spreadsheet exists but nobody owns its accuracy

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, act-commencement-2025dpdp-act-2023 · act-commencement-2025
Discovery and ownership06 · Research noteFrom obligation to evidence: the DPDP implementation stack

Implementation teams benefit from separating legal interpretation from the engineering artefacts used to execute and test a decision. Radar context: Software and data-flow inventories is Adopt.

Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026act-commencement-2025 · pib-status-2026
Discovery and ownership07 · Specialist propertyImplementation pathways

Explore implementation planning when the inventory is ready to drive work. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route
Notice and purpose01 · PrerequisiteInventory change gate

Carry forward the reviewed evidence boundary from Discovery and ownership.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Notice and purpose02 · Implementation patternVersioned notice registry

Publish the right notice at the right collection surface and keep the rendered version reproducible.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Notice and purpose03 · Validation / testTest NOTICE-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Notice and purpose04 · Evidence artefactApproved notice version and itemised data-purpose pairs

Primary retrievable output for explain; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Notice and purpose05 · Failure modeA generic privacy policy substitutes for collection context

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Notice and purpose06 · Research noteA source model for phased legal commencement

Status should be computed from verified publication metadata and provision groups, while the original source and calculation basis remain visible. Radar context: Policy-as-code for source validation is Adopt.

Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, dpdp-rules-2025, rules-corrigendum-2025act-commencement-2025 · dpdp-rules-2025 · rules-corrigendum-2025
Notice and purpose07 · Specialist propertyScenario learning

Use scenario-led learning to examine how notice choices change with context. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route
Choice and consent evidence01 · PrerequisiteNotice archive

Carry forward the reviewed evidence boundary from Notice and purpose.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Choice and consent evidence02 · Implementation patternConsent event and withdrawal propagation

Treat consent and withdrawal as versioned events that downstream systems must acknowledge.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Choice and consent evidence03 · Validation / testTest CONSENT-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Choice and consent evidence04 · Evidence artefactSynthetic consent-event schema and approved production schema

Primary retrievable output for record; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Choice and consent evidence05 · Failure modeA button click is stored without the notice or purpose context

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Choice and consent evidence06 · Research noteConsent Managers as infrastructure: interfaces, accountability and open questions

Interoperability, receipt semantics, revocation reliability and minimised identity binding deserve design attention before integration claims are made. Radar context: Structured consent receipts is Adopt.

Editorial analysis · reviewed 2026-08-30 · sources dpdp-rules-2025, rules-landing-2025dpdp-rules-2025 · rules-landing-2025
Choice and consent evidence07 · Specialist propertyComparative analysis

Compare framework concepts without treating a comparison as legal advice. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route
Rights and grievance operations01 · PrerequisiteConsent record retrieval

Carry forward the reviewed evidence boundary from Choice and consent evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Rights and grievance operations02 · Implementation patternData Principal request orchestration

Coordinate identity risk, search, action, response and escalation without building a new data silo.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Rights and grievance operations03 · Validation / testTest RIGHTS-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Rights and grievance operations04 · Evidence artefactRequest state-transition history

Primary retrievable output for respond; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Rights and grievance operations05 · Failure modeIdentity checks collect more data than the request needs

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Rights and grievance operations06 · Research noteWhat an evidence-producing rights workflow needs

A case workflow should expose missing system acknowledgements and unresolved risk instead of equating a sent response with completed work. Radar context: Rights-request orchestration is Trial.

Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026act-commencement-2025 · pib-status-2026
Rights and grievance operations07 · Specialist propertyEvidence review

Examine how evidence quality and confidence can be reviewed without certification claims. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route
Retention and deletion01 · PrerequisiteRequest exercise record

Carry forward the reviewed evidence boundary from Rights and grievance operations.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Retention and deletion02 · Implementation patternRetention event engine

Convert approved purpose and lifecycle events into scoped expiry work and verifiable outcomes.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Retention and deletion03 · Validation / testTest RET-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Retention and deletion04 · Evidence artefactApproved event-to-retention rule

Primary retrievable output for expire; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Retention and deletion05 · Failure modeA duration exists without a reliable start event

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Retention and deletion06 · Research notePrivacy engineering for Indian MSMEs: where simplicity matters

A small organisation can begin with named owners, a compact inventory and a few tested lifecycle paths while avoiding unsupported readiness claims. Radar context: Event-driven retention is Trial.

Editorial analysis · reviewed 2026-08-30 · sources pib-rules-explainer-2025, pib-status-2026pib-rules-explainer-2025 · pib-status-2026
Retention and deletion07 · Specialist propertyPractical tools

Explore practical tool concepts after the trigger and evidence design are understood. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route
Processor and transfer governance01 · PrerequisiteRetention change log

Carry forward the reviewed evidence boundary from Retention and deletion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Processor and transfer governance02 · Implementation patternProcessor and sub-processor register

Link approved providers to instructions, data flows, locations, assurance and exit work.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Processor and transfer governance03 · Validation / testTest PROC-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Processor and transfer governance04 · Evidence artefactProcessor and sub-processor register entry

Primary retrievable output for govern; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Processor and transfer governance05 · Failure modeA contract is stored without linking it to actual data flows

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Processor and transfer governance06 · Research noteFrom obligation to evidence: the DPDP implementation stack

Implementation teams benefit from separating legal interpretation from the engineering artefacts used to execute and test a decision. Radar context: Software and data-flow inventories is Adopt.

Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026act-commencement-2025 · pib-status-2026
Processor and transfer governance07 · Specialist propertyImplementation pathways

Move from the register into a reviewed implementation plan. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route
Security and breach response01 · PrerequisiteVendor exit evidence

Carry forward the reviewed evidence boundary from Processor and transfer governance.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Security and breach response02 · Implementation patternBreach fact ledger and communication package

Separate confirmed facts from hypotheses and generate consistent decision and communication evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Security and breach response03 · Validation / testTest SEC-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Security and breach response04 · Evidence artefactSafeguard decision and implementation record

Primary retrievable output for protect; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Security and breach response05 · Failure modeA control name replaces a risk-based design decision

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Security and breach response06 · Research noteFrom obligation to evidence: the DPDP implementation stack

Implementation teams benefit from separating legal interpretation from the engineering artefacts used to execute and test a decision. Radar context: Automated legal-text monitoring is Assess.

Editorial analysis · reviewed 2026-08-30 · sources act-commencement-2025, pib-status-2026act-commencement-2025 · pib-status-2026
Security and breach response07 · Specialist propertyNews and discourse signals

Monitor external developments separately from the organisation’s own incident evidence. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route
Governance and assurance01 · PrerequisiteBoard detail package

Carry forward the reviewed evidence boundary from Security and breach response.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Governance and assurance02 · Implementation patternSDF DPIA and audit evidence room

Organise applicability, scope, findings and remediation without implying designation or certification.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Governance and assurance03 · Validation / testTest CHILD-01

Trace the sample from its trigger and owner through the implemented system to the retained evidence.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023dpdp-act-2023
Governance and assurance04 · Evidence artefactApplicability decision with source and facts

Primary retrievable output for assure; inspect the full layer evidence set before drawing a conclusion.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Governance and assurance05 · Failure modeA checklist score is presented as legal assurance

A visible failure case keeps a completion label from hiding an evidence gap.

Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025
Governance and assurance06 · Research noteWhy a compliance score must show confidence and evidence type

Assessment interfaces should separate requirement applicability, control design, implementation evidence and test confidence before summarising results. Radar context: Confidential-computing claims is Watch.

Editorial analysis · reviewed 2026-08-30 · sources dpdp-act-2023, pib-status-2026dpdp-act-2023 · pib-status-2026
Governance and assurance07 · Specialist propertyPrivacy talent pathways

Explore role and talent pathways without invented qualifications or hiring claims. This route remains optional if the destination is unavailable.

Contextual external property · no affiliation or availability impliedNone · contextual external route

USE THIS ROUTE WHEN

A review needs an explainable sequence.

Start with public catalogue records, open the linked detail pages and retrieve evidence from the real system under an authorised review process.

DO NOT USE IT TO

Store findings or infer applicability.

The route deliberately carries no notes, people, findings or pass/fail state. Legal applicability and provision pinpoints still require source-led human review.