Where legal and procurement start on DPDP third-party risk

What is inside

1. 01The eight steps, by functionProcurement and finance, the privacy office, legal and the business owner, each holding the steps that are theirs and handing off in order.
2. 02What each step produces, and what stops itPer step, the artifact it hands to the next one and the point at which it most often stalls.
3. 03What to ask before signing, and what to check afterwardsThe questions that test a vendor before signing, the provisions that go into the contract, the checks once it is live, and how often to repeat them.
4. 04The chain, and where responsibility staysThe Data Fiduciary, the Data Processor and everything further down the chain, with the section that keeps the duty where it is.

Procurement holds step one, and the sheet names who holds each of the seven after it.