Service

Data protection compliance for the laws you operate under

Data protection rules are tightening. India’s Digital Personal Data Protection Rules were notified in November 2025 and phase in over 18 months, and Ghana’s Data Protection Commission has made 2026 a year of enforcement. We help organisations map the personal data they hold, put the right controls in place and train their people to keep it that way.

Service Data protection
Engagement Pilot first
Offices Kolhapur · Accra
What we deliver

What the service covers

Data mapping: what personal data you hold, where and why
Gap assessment against India’s DPDP Act, 2023 or Ghana’s Data Protection Act, 2012 (Act 843)
Consent, privacy notices and records of processing
Registration with Ghana’s Data Protection Commission where required
Access control, retention and breach response procedures
Staff awareness training with SIIMT
Problems it solves

Problems it solves

Unclear what personal data is held

Customer, staff and patient data sits in many systems. A data map shows what you hold, where it goes and who can see it.

Obligations not yet in place

Consent, notices, security safeguards and breach reporting each need a working process. We set them up and assign owners.

Policies on paper, not in practice

We turn policies into working controls in your systems and train the people who handle the data.

How it runs

How an engagement runs

Every engagement follows the same three steps, so the first commitment is small and the result is measured.

01

Discover

We map the decision, the data and the KPI, then agree one narrow pilot. We quote after discovery, not before.

02

Pilot

We build the smallest version that proves value, in your environment, measured against the number we agreed.

03

Expand

If the pilot works, we scale it across teams, products or markets, and train your people to own it.

Industries

Industries we apply it in

The same method, shaped to how each sector runs.

FAQ

Common questions

Short answers to the questions we hear most. For anything else, start a conversation.

Which laws do you work with?

India’s Digital Personal Data Protection Act, 2023 and its Rules, and Ghana’s Data Protection Act, 2012 (Act 843). We confirm which apply to your organisation before any work starts.

Do we need to register?

In Ghana, organisations that process personal data must register with the Data Protection Commission, and we prepare the registration. India’s Act sets duties on consent, notice, security and breach reporting instead.

Is this legal advice?

No. We provide compliance and technical services. Where a legal opinion is needed, we work alongside your lawyers.

Where should we start?

With a data map and gap assessment for one business unit, run as a small paid pilot.

Related

See also

Start a conversation

Tell us what you are trying to fix.

Tell us the decision you need to make better. We reply with questions and a pilot scope, not a brochure.