INDIA DPDP · EU GDPR · US CCPA · PRIVACY OPERATIONS
Privacy Center, DSR inbox, fulfillment playbooks, and compliance proof — in one workspace built for DPDP, GDPR, and CCPA.
Business home
Needs action today
Deletion request · IN DPDP
DSR-1042
Consent withdrawal · Customer email
DSR-1043
Access request · GDPR
DSR-1044
₹250 Cr
max penalty under DPDPA
30 days
to respond to any data principal
72 hours
breach notification window
May 2027
full enforcement deadline
NON-COMPLIANCE EXPOSURE
Regulators aren't waiting. The fines are calibrated to hurt.
₹250 Crore
Maximum aggregate penalty per entity
India DPDPA
€20 Million
Or 4% of global turnover
EU GDPR
$7,500
Per intentional violation × affected consumers
US CCPA
Indian companies processing EU citizen data face both regimes simultaneously.
THE PLATFORM
Six integrated areas. Click any to explore the full details.
Every channel, one inbox. Every request classified and timed before your team touches it.
ExplorePlaybooks turn requests into tracked work across your stack. Nothing falls through.
ExploreConsent collected, honoured, and proven. The banner, the record, and the audit trail.
ExploreA live readiness score, DPIA workspace, RoPA, and breach response — all from your actual data.
ExploreAsk anything about privacy law. Every answer cites the exact clause.
ExploreEvidence captured as you work. Closure reports, audit trail, and six compliance exports.
ExploreBUILT FOR YOUR INDUSTRY
The rights are universal. The context, request types, and edge cases are not. Privacy Conduit ships with the domain knowledge built in.
Deletion vs. regulatory retention
Financial services companies hold some of the most sensitive personal data. DPDP, GDPR, and CCPA all require you to respond to access and deletion requests, even when retention mandates apply. Privacy Conduit helps you respond correctly — honouring rights while documenting the legal basis for any data you must retain.
Typical requests you'll receive
30 days
DPDP response deadline — regardless of KYC retention rules
Privacy Conduit handles intake, verification, playbooks, and proof — out of the box for fintech teams.
GETTING STARTED
Day 1
Publish your Privacy Center. Configure your intake email. Your workspace is ready in 15 minutes.
Ongoing
Every DSR lands in one inbox. Verify, assign, fulfill, and respond with evidence attached.
Always ready
Closure reports, audit trail, RoPA, and DPIA are generated from the work you already did.
DPDP COMPLIANCE TIMELINE
Aug 2023
DPDP Act enacted
Presidential assent. The law exists.
Jan 2025
Rules notified
MeitY published the DPDP Rules. Obligations crystallised.
Nov 2025
Data Protection Board
Board operational. Complaints can now be filed against your company.
Nov 2026
Consent Manager provisions
Consent Manager framework live. Withdrawals must work operationally.
May 2027
► Full enforcement
All substantive provisions in force. Penalties fully applicable.
Aug 2023
DPDP Act enacted
Presidential assent. The law exists.
Jan 2025
Rules notified
MeitY published the DPDP Rules. Obligations crystallised.
Nov 2025
Data Protection Board
Board operational. Complaints can now be filed against your company.
Nov 2026
Consent Manager provisions
Consent Manager framework live. Withdrawals must work operationally.
May 2027
► Full enforcement
All substantive provisions in force. Penalties fully applicable.
MULTI-JURISDICTION COVERAGE
Privacy Conduit covers the three jurisdictions that matter most to Indian companies — whether you serve domestic users, EU citizens, or California consumers.
Data principal rights, grievance officer, consent records, breach response. Enforced May 2027.
Eight data subject rights, RoPA, DPIA, 72-hour breach notification. Applies wherever EU data flows.
Access, deletion, opt-out of sale/sharing, and sensitive PI limits. Applies to California consumers.
Proof
Legal and compliance buyers need confidence that the team did the work and can prove it later. Privacy Conduit packages proof from the operational workflow itself.
START TODAY
Start before the first request arrives.
No credit card required. No sales call. Privacy Center live in 15 minutes.