Things to work from

A resource is something with a job outside this page: a list you can work down, or a tool you can run. The list is below. The tool sits outside the section, and the two answer opposite halves of one problem — what has to exist before the substantive duties commence, and whether what exists now does what you believe it does.

The DPDP compliance checklist is twelve controls, each against the provision that requires it and the evidence worth keeping afterwards. It is ordered by dependency rather than by importance, and the order is the argument: consent cannot be scoped to a purpose before the purposes are known, and withdrawal built as a settings screen can satisfy Sec. 6(4), which asks only that withdrawing be as easy as consenting was, while leaving Sec. 6(6) untouched — the duty to cease processing within a reasonable time and to cause your Data Processors to cease.

The redaction tool is the other kind, and it lives under /tools/ rather than here. It runs a detector over a specimen Indian KYC form and reports every identifier it finds, the method that found it, and the confidence that method earns — names at low confidence deliberately, because a context model has not earned what a checksum has. It is the checklist's masking line in a form you can watch run. It does not accept your own file, and it says so above the tool rather than below it.

Neither replaces reading the Act, which is what Learn is for, and neither is sector advice: where a control lands differently on a school, a bank or an employer, industries carries it further.