- Home
- Compliance
- GDPR Compliance
Standard compliance
GDPR Compliance
If you serve EU customers or process their data, GDPR applies — even from India. We build a practical privacy programme that satisfies EU clients' data protection clauses and holds up to scrutiny.
Why teams choose Adiroha
- Led by CISA and ISO 27001 lead auditors
- Clear scope, roadmap and timeline before we start
- Evidence organised in the Cydital platform
- Support through the external audit and beyond
Scope
What we cover
- Data mapping and records of processing (Article 30)
- Lawful basis and consent review
- Data protection impact assessments (DPIAs)
- International transfers and Standard Contractual Clauses
- Data subject rights request workflow
- Processor agreements and vendor due diligence
- Breach notification procedure
- EU representative guidance (Article 27)
Deliverables
What you receive
- GDPR gap report
- Records of processing
- Privacy policy and notice set
- DPIA templates and completed assessments
How we work
Discover. Assess. Remediate. Validate.
Discover
Understand your business, scope, stakeholders and the obligations that actually apply to you.
Assess
Gap assessment against the framework or regulation, turned into a prioritised, costed roadmap.
Remediate
Implement policies, controls and evidence with your teams, tracked in Cydital.
Validate
Internal audit before the external one, audit-day support, and continuous compliance after.
FAQ
Common questions
Does GDPR apply to an Indian company?
Yes, if you offer goods or services to people in the EU or monitor their behaviour, or process EU data on behalf of EU clients.
Can GDPR and DPDP be handled together?
Yes. We build one privacy programme covering both, since data mapping, notices and rights handling overlap heavily.
Do we need an EU representative?
Organisations outside the EU that are subject to GDPR usually need to appoint an EU representative under Article 27, unless an exemption applies.
What are Standard Contractual Clauses?
EU-approved contract terms that allow personal data to be transferred from the EU to countries without an adequacy decision, such as India.
What are the penalties under GDPR?
Fines can reach €20 million or 4% of global annual turnover, whichever is higher, depending on the infringement.
Related
Related services
HIPAA Compliance
HIPAA Security and Privacy Rule readiness for healthtech, RCM and healthcare BPO companies serving US clients.
Learn moreAdiroha For Startups
A lean security and compliance programme for startups — enterprise-deal ready, investor-ready, and sized to your stage.
Learn moreISO 27701 Certification
ISO/IEC 27701 privacy information management — extending your ISMS to cover personal data, GDPR and DPDP.
Learn moreTalk to a specialist about GDPR Compliance.
A free 30-minute consultation to understand your scope and timeline. We follow up with a fixed proposal.