SCENARIO D04 · PROCESSORS & EVIDENCE
A company has no processor inventory. What evidence is foundational without overstating the law?
IN PLAIN ENGLISH
Why you are seeing this step
This field note uses one realistic decision to separate the official source, an editorial interpretation, a practical option, evidence to keep, and any uncertainty that still depends on your facts.
Educational only, not legal advice. Source status is dated 13 May 2027; inspect the official links below before relying on it.
BEST NEXT STEP
Create a current processing/processor map that supports contract, instruction and safeguard review.
Use the inventory as evidence infrastructure, while labelling the underlying contract/responsibility duties accurately.
WHY THE OTHER INSTINCTS MISS
Create a current processing/processor map that supports contract, instruction and safeguard review.
Correct. The inventory is an implementation mechanism for demonstrating and operating the future section 8 duties.
Claim the Act prescribes a specific spreadsheet template.
The Act does not prescribe that artefact format.
Rely on accounts-payable records as the complete processor map.
Payment records rarely show processing purpose, data, access, instructions or sub-processors.
BUILD THIS EVIDENCE
Processor register with purpose, data, system, contract, instructions, safeguards, owner and review date.
This artefact supports review. It does not certify compliance or replace advice on your facts.
- Guidance type
- implementation indicator
- Pinpoint
- Act s. 8(1)–(2), 8(5); G.S.R. 843(E)
- Reviewed
- 2026-08-30
- Change note
- Status and pinpoint reviewed against the official Act, final Rules, commencement notification and corrigendum for this educational website.
OFFICIAL SOURCE TRAIL
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) ↗
Definitions and specified machinery provisions are operative; most substantive duties and rights are notified for later commencement. Check each scenario's status record.
Act s. 1(2); provision-specific section pinpointsDPDP Act commencement notification G.S.R. 843(E) ↗
Appoints immediate, one-year and eighteen-month commencement cohorts for the Act.
G.S.R. 843(E), clauses (a)–(c)