Back to Module
3 of 3|Master Capstone Project
video 25 min•Capstone Project

Compliance Plan

Your final deliverable: the compliance roadmap.

🎯 Learning Objectives

  • ▸ Develop a phased compliance roadmap
  • ▸ Prioritize high-risk issues

The 90-Day Roadmap

A compliance program cannot be built overnight. Prioritize the highest-risk gaps first.

  • • Phase 1 (Immediate): Rewrite the Privacy Policy, implement a valid consent banner, and appoint a Grievance Officer.
  • • Phase 2 (Short-term): Draft Data Processing Agreements (DPAs) for labs and pharmacies, implement encryption at rest, and start employee training.
  • • Phase 3 (Long-term): Conduct a third-party audit, implement a consent dashboard, and build an incident response drill.

Congratulations! You have completed the course. Use this capstone project to demonstrate your skills to employers or clients.

📖 Glossary

Compliance Roadmap
A strategic plan outlining the steps and timeline for achieving regulatory compliance.

🔑 Key Takeaways

  • Phase 1 (0-30 days) must focus on fixing immediate risks (Privacy Policy, Consent).
  • Phase 2 (30-60 days) should include vendor contracts and training.
  • Phase 3 (60-90 days) should focus on audits and ongoing monitoring.

📚 Further Reading

  • Privacy Program Management — IAPP (2022)
Shilpi Kulshrestha
Course Author

Shilpi Kulshrestha

Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...