OneConsent Privacy Assessments
DPIA & Privacy Risk Assessment — identify, assess and mitigate privacy risks associated with personal data processing.
🔴 DPIA: Mandatory Compliance Requirement. Under Section 10 of the DPDP Act and the DPDP Rules, 2025, a Significant Data Fiduciary must undertake periodic (annual) DPIA and audit.
How DPIA works in OneConsent
RoPA / Data Inventory → DPIA → Risk → Controls → Remediation → Residual Risk → Approval → Evidence → Review
Configure
Processing Activity
Screening
Assessment
Risk Assessment
Controls & Mitigation
Residual Risk
Review & Approval
Monitoring
Reassessment
Annual DPIA Requirement
Last DPIA cycle: 28 Mar 2026 · Next due: 28 Mar 2027
Annual DPIA review due in 204 days
3
Total DPIAs
3
Mandatory DPIAs
SDF obligation
1
In Progress
4
High/Critical Risk
3
Open Actions
1
Overdue Actions
1
Due for Review
72%
Avg. completeness
1
In Monitoring
DPIA Review Recommended
Approved assessments remain valid; a review has been recommended.
DPIA-002 Customer Onboarding DPIA — New vendor added to Customer Onboarding — review recommended.
DPIA Status
Draft0
Screening0
Initiated0
Assessment In Progress1
Pending Review1
Approved0
Monitoring1
Reassessment Recommended0
Reassessment In Progress0
Risk Distribution
Critical2
High2
Medium1
Low0
Recent DPIAs
| DPIA Name | Processing Activity | Owner | Overall Risk | Status | Review Date | Actions |
|---|---|---|---|---|---|---|
| Employee Management DPIA | Employee Management | Priya Nair (HR) | Critical | Pending Review | 2027-06-20 | |
| Customer Onboarding DPIA | Customer Onboarding | Rahul Mehta (Privacy) | High | Monitoring | 2027-03-28 | |
| Marketing & Profiling DPIA | Marketing & Profiling | Sana Kapoor (Marketing) | Critical | Assessment In Progress | 2027-08-19 |