Digital Personal Data Protection Act 2023 and Rules 2025
DPDP duties, dated and evidenced.
Fohrkast turns the Act and the Rules into dated duties for each business, records consent and rights requests, drafts breach intimations, and keeps a tamper-evident record of each step.
Access is by invitation. Sign in with an invited work email.
Request access
Each request is read by Fohrkast staff. Replies come from support@fohrkast.com.
Fohrkast keeps these details encrypted for 180 days to answer the request, then deletes them. They are not used for marketing. Privacy notice.
Four areas, one record
- 01
Duties
Each duty in the Act and the Rules that applies to the business, with its date, its basis and the clause it comes from. Rulebooks are signed and versioned, and every version is published.
- 02
Consent and notices
Notices in English or a language of the Eighth Schedule (s.5(3)). Consent recorded per purpose, with withdrawal as easy as giving it (s.6(4)). A hosted page for businesses without a website.
- 03
Requests and grievances
Access, correction, erasure and nomination requests (ss.11 to 14) and grievances (s.13), each with its clock, its reply and its proof.
- 04
Breaches
An incident record scoped from the data map, with drafts of the intimations to the Data Protection Board and to each affected person (s.8(6), Rule 7). The business decides and sends.
Published rulebook versions: DPDP Act and Rules.
What Fohrkast does
- Calculates each date and states its basis.
- Keeps a hash-chained record of each step.
- Drafts notices, replies and intimations.
- Keeps personal details sealed per person.
What Fohrkast does not do
- Give legal advice.
- File or send on a business's behalf.
- Hold more personal data than a duty needs.
- Claim certification. Fohrkast is not yet certified.
For businesses, partner firms and privacy teams
Businesses
The owner sees each date and signs off each duty. Front-desk staff log requests at the counter as they arrive.
Partner firms
Many businesses in one place. Each business claims its own workspace and grants a mandate with the powers it ticks.
Privacy teams
A duty register with the clause behind each duty, assessments, vendor records and an evidence pack for audit.
Hosting, backups, logs, sub-processors and the AI position: Trust.
Sign-in, workspace claims, requests, incidents and support: Help.