DPDPA Compliance
India's Digital Personal Data Protection Act, establishes a legal framework for processing digital personal data, including obligations related to data protection, security safeguards, breach notification, and individual rights.
KloudDB Shield helps organizations identify personal data stored in PostgreSQL databases, detect security vulnerabilities, monitor database configurations, and improve visibility into data protection controls across their PostgreSQL infrastructure.
Key DPDPA Compliance Capabilities
| KloudDB Shield Feature | How It Helps with DPDPA Compliance |
|---|---|
| PII Scanner | Discovers personal data such as Aadhaar, PAN, passport numbers, email addresses, phone numbers, bank account details, and other identifiers in PostgreSQL databases. |
| 100+ Security Checks | Identifies database misconfigurations, insecure settings, and security weaknesses that could expose personal data. |
| Backup Compliance Dashboards | Tracks database backup activity and helps identify potentially unauthorized backup attempts that could expose personal data. |
| CIS Benchmark Assessments | Evaluates PostgreSQL configurations against established security-hardening best practices. |
| SSL/TLS Security Scanner | Detects insecure database encryption configurations and helps protect personal data transmitted over database connections. |
| Elevated Privileges Report | Identifies database accounts with excessive privileges that could lead to unauthorized access to personal information. |
| Inactive Users Report | Identifies unused database accounts that may introduce unnecessary security risks. |
| Common Users Report | Highlights commonly used database accounts that may weaken individual accountability. |
| Client IP Scanner | Provides visibility into client IP addresses connecting to PostgreSQL servers, supporting access investigations. |
| Unused HBA Rules Detection | Identifies unnecessary PostgreSQL authentication rules that could permit unintended database access. |
| GUC Drift Detection | Detects changes to PostgreSQL security configurations that deviate from approved baselines. |
| Configuration Auditing | Identifies insecure PostgreSQL settings and supports ongoing security reviews. |
| Backup Compliance Dashboards | Tracks database backup activity and helps identify potentially unauthorized backup attempts that could expose personal data. |
Mapping KloudDB Shield to DPDPA Requirements
The following mapping aligns Shield's capabilities with relevant provisions of the DPDP Act, 2023, and DPDP Rules, 2025.
| DPDPA Provision | Relevant Shield Capabilities |
|---|---|
| Section 8(4) — Technical and Organizational Measures | Security checks, CIS benchmarks, configuration audits |
| Section 8(5) — Reasonable Security Safeguards | SSL scanning, privilege analysis, security assessments |
| Section 8(6) — Personal Data Breach Notification | Client IP visibility, backup activity reports, security findings |
| Section 8(7) — Erasure of Personal Data | PII discovery, database inventory |
| Section 8(8) — Retention of Personal Data | Data discovery and inventory support |
| Section 11 — Right to Access Information | PII discovery and database inventory |
| Section 12 — Right to Correction and Erasure | Identification of personal data locations |
| DPDP Rules, Rule 6 — Reasonable Security Safeguards | Security configuration assessments, SSL checks, access reviews, backup monitoring |