Due Diligence Questionnaire (DDQ)

What is Due Diligence Questionnaire (DDQ) ?

The Digital Personal Data Protection Act sets rights for individuals and obligations for data controllers and processors handling digital personal data in India. It requires lawful processing, consent, minimization, breach notification, and contractually enforced safeguards for third parties. In TPRM, organizations must confirm vendor compliance.

FAQs

Are DDQs standardized?

Some industries share common formats, but many are customized.

How often are DDQs required?

At onboarding and during periodic reassessments.

Do DDQs replace audits?

No, they complement audit evidence.