Whitepaper · Operations
The DPDP Operating Model
Most DPDP programmes are planned as projects with an end date. The Act doesn't work that way. Registers go out of date, consent drifts, vendors change and people leave. This paper sets out an operating model for running data protection as a permanent function: six capabilities, clear roles, the records that prove each obligation, the metrics a Board should see, and a thirty-week plan to 13 May 2027.
October 2026 · 35 min