What the DPDP Act requires
Significant Data Fiduciaries must appoint an independent data auditor to carry out periodic audits of their compliance with the Act, and must conduct Data Protection Impact Assessments (DPIAs) for high-risk processing. Every Fiduciary benefits from internal review, because the Data Protection Board can call for evidence that your safeguards actually work.