Back to Module
2 of 3|Master Capstone Project
reading 20 min•Capstone Project
Data Inventory
Your first task: mapping the data.
🎯 Learning Objectives
- ▸ Create a data inventory register
- ▸ Classify data based on sensitivity
Your Task
Create a spreadsheet with the following columns and fill it out for at least 5 data flows (e.g., App Registration, Doctor Consultation, Payment, Marketing, Analytics).
- • Data Element (e.g., Phone Number)
- • Data Subject (e.g., Patient)
- • Source (e.g., App Form)
- • Purpose (e.g., OTP Verification)
- • Storage Location (e.g., AWS Mumbai)
- • Legal Basis (e.g., Consent)
- • Classification (Public, Internal, Confidential, Restricted)
📖 Glossary
- Data Touchpoint
- Any point where personal data is collected, processed, or accessed by an organization.
🔑 Key Takeaways
- You must identify all data touchpoints.
- You must classify health data as "Restricted".
- You must identify the legal basis (consent vs legitimate use) for each data flow.
📚 Further Reading
- DPDPA Section 8 — Government of India (2023)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...