Template library

Privacy impact assessment

A working assessment with a risk register at its heart, a DPDPA-specific legal-basis check and the rule 13 (3) algorithmic due-diligence module. Mandatory every twelve months for Significant Data Fiduciaries; a strong voluntary control for everyone else.

An original template, drafted against the DPDP Act, 2023 and DPDP Rules, 2025. Not legal advice — review with counsel before use.

One of 14 DPDPA document templates, drafted in-house against the Act and the Rules. Free to generate as a Word file — no account needed for the preview.

Drafted against G.S.R. 846(E); citations open the gazette text inline.

About this document

What it covers

The placeholders this template asks you to fill in.

[Project Name][Assessor Name and Role][Statement of the Assessor's Independence from the Project][SDF Status: yes, no, or notification expected][SDF Notification Date][Assessment Due Date][Sign-off Name and Role][Assessment Version][Assessment Date][Trigger Description][Data Items Processed][Data Sources][Systems and Processors][Outputs and Recipients][Retention Trigger and Period][Storage and Access Destinations][Assessed Purpose][Gate Relied On][Evidence Reference][Notice Compliance: yes or gap][Necessity Findings][Minimisation Findings][Accuracy Findings][Access Review: yes or gap][Correction and Erasure Review: yes or gap][Withdrawal Parity Review: yes or gap][Nomination and Grievance Review: yes or gap][Children Review: yes, gap, or not applicable][Algorithmic System Name][System Function][Testing Evidence][Reasoned Conclusion][Safeguard Status][Safeguard Notes][Access Control Status][Access Control Notes][Logging Status][Logging Notes][Backup Status][Backup Notes][Log Retention Status][Log Retention Notes][Processor Contract Status][Processor Contract Notes][Breach Readiness Status][Breach Readiness Notes][Risk Description][Affected Cohort][Likelihood Rating][Severity Rating][Mitigation Plan][Risk Owner][Mitigation Deadline][Residual Risk and Acceptor][Restricted Country Finding][Rule 15 Finding][Localisation Finding][Agreed Actions][Significant Observations][Decision: proceed, proceed with changes, or do not proceed][Next Review Date][Sign-off Date][Board or Board Committee Name]