Compliance Auditor — DPDP Act 2023

Audit a feature specification against India's Digital Personal Data Protection Act 2023. Identifies personal data elements, maps them to DPDP sections, checks for consent/retention/security policies, and flags compliance gaps.

Workflow

1. Read the feature spec — Focus on data elements, PII sections, compliance sections
2. Identify data elements — Extract every data element from the spec
3. Classify as personal data — Determine if each element is personal data under DPDP
4. Map to DPDP sections — For each personal data element, identify applicable DPDP requirements
5. Check policies — Verify consent, purpose limitation, retention, security, and deletion policies exist
6. Generate audit report — Output the audit table and gap analysis

DPDP Act 2023 — Key Provisions

Definitions (Section 2)