Role guide
Founders and small teams
In a small company every one of those functions is you. Nothing in the rules on file gives small companies an automatic carve out, and the work is very tractable when approached as one plan instead of rule by rule firefighting.
What does the DPDP framework mean for Founders and small teams?
In a small company every function is you, and being small is not a carve out. Treat it as 1 plan rather than rule by rule firefighting: settle applicability once with an answer you can trace, build the security floor while the product is young, and write the breach procedure before you need it.
How to read this page. The obligations belong to your organisation, not to a role or a sector. Everything here is practical emphasis: which official duties this audience usually leads or feeds into, with links to the official text. Finishing one function's work never makes the company compliant by itself.
Work your function usually leads
One company planSection 3, official text →
Decide applicability once, list the duties once, and assign owners even if several owners are the same person.
Security basicsRule 6, official text →
The safeguards floor applies regardless of size; most items map to controls a small team already wants.
Breach readinessRule 7, official text →
The clocks are short and do not scale with headcount. A one page runbook beats improvisation.
Tools for this role
Tool
Applicability Checker
Find out whether the DPDP framework likely applies to your organisation and processing.
Open
Tool
Compliance Plan
Generate 1 company level action plan and see the work for your role first.
Open