Free Checklist

The DPDP Audit Checklist

Rule 13 requires a notified Significant Data Fiduciary to run a DPIA and an audit every twelve months and furnish significant observations to the Board. This checklist gives internal audit and advisory teams the test procedures: what to inspect, the evidence that proves a control operated, and how to rank each finding against the penalty band its duty actually sits in.

• Test procedures across notice, consent, safeguards, breach, retention and rights
• Boundary tests for every period, because a policy stating one year proves nothing
• A findings log with worked entries specific enough to close or dispute
• Severity guidance mapped to the Schedule's real penalty bands, and the myths to avoid