DPDP for Marketing Teams
- Connect day-to-day workflows to what you collect, disclose, and retain—on real user journeys.
- Review forms, integrations, and vendor access on a real journey.
- Document decisions so sales and product do not contradict support.
- When stakes are high, verify wording against official resources.
- Use the compliance portal to pick the next operational drill.
See also: Compliance portal · Official resources · Guides index
Marketing teams often create privacy risk through form design, consent assumptions, list handling, lifecycle automation, and vendor/tool sprawl.
What to review first
- Lead-gen forms and capture language — the consent standard is Section 6(1): free, specific, informed, unconditional, unambiguous, with a clear affirmative action, limited to what the stated purpose actually needs
- Consent and suppression logic — Section 6(4) requires withdrawal to be as easy as giving consent, and Section 6(6) requires ceasing processing within a reasonable time after withdrawal, so a suppression flag that only stops email but leaves ad retargeting running is a real gap
- CRM and lifecycle tool access
- Notice drift after campaign or product changes