This data inventory template provides a detailed record of an organisation’s data handling practices, and aids in evaluating whether such practices conform to the stringent requirements set out under the Digital Personal Data Protection Act, 2023 (“DPDPA”). The template contains entries in respect of the types of personal data collected, categories of individuals from whom it is collected, entities with whom data is shared, how long it is retained, security measures used to protect the data, etc. Although maintaining a data inventory is not a legal requirement, it is beneficial to have one in place because it serves as a useful starting point to determine the scope of an organisation’s data processing activities.