The team behind DPDPWeb

We are digital analytics people. For years our work has been the tracking layer of websites: cookie consent, Google Tag Manager, Google Analytics and marketing tags, for companies in the US, Europe and India.

When the DPDP Act arrived, we saw a lot of demand for hands-on website work. Many banner setups we come across follow the same pattern. Someone places the script, clicks Accept once, and tells the client, "See, it is working."

That is not how it works. The real test is what happens when a visitor says no, or changes their mind. If someone moves from Accept to Reject, Google Analytics and the marketing tags must stop firing straight away. If they keep firing, the website is collecting data without consent, and that is the kind of gap the penalties in the Act are aimed at.

A Data Protection Officer or a privacy consultant looks after the company-wide side: internal data, contracts and security. We stay on the website, and three things are our core: the cookie banner, the consent checkbox and notice below every form, and the privacy policy and cookie policy pages. We know what to do there because websites and their tracking are what we have always worked on.

This is where web analytics and privacy meet, and it is work we already do. We have implemented GDPR and CCPA consent on live websites, and the team holds a OneTrust certification. We started DPDPWeb to do the same job properly for websites that serve people in India.