DPDP Act 2023 Compliance Checklist

India's Digital Personal Data Protection (DPDP) Act 2023 mandates that Data Fiduciaries (businesses) irrecoverably delete personal data when its purpose is served. For retired IT assets, this requires a certified destruction workflow.

1. Data Sanitization Standards

Ensure your vendor uses recognized media sanitization standards like NIST 800-88 R1 or DoD 5220.22-M.

Is logical erasure (wiping) verified for every sector?
Are non-functional drives physically shredded to particles < 20mm?
Do you receive a serial-numbered Certificate of Destruction?

2. Chain of Custody Documentation

A leak during transit is still your liability under the DPDP Act.

Is the transport vehicle GPS-tracked and sealed?
Is there a signed manifest for every device leaving your premises?
Is the recycler KSPCB authorized (Verify Auth No: KL/EW/628)?

Ready for an Audit?

Failure to comply with data disposal mandates can attract penalties up to ₹250 Crore. Get a certified ITAD assessment today.

Book Compliance Audit