Working privacy tools, built on Indian privacy law.
I build practical tools that translate legal rules into working software. A personal workshop by Ameer Riaz, focused on real-world data protection.
Privacy Tools
Four focused tools designed around operational duties under India's DPDP Act, 2023.
View detailed index for all tools →
Privacy Peek
Browser Extension · DPDP Risk Summary
My first-ever privacy engineering project. A browser extension tool that inspects websites you visit, evaluates them against key DPDP Act requirements, and generates an instant privacy risk summary directly on your device.
Legal Basis: DPDP Act Section 6 (Notice requirements and transparency evaluation).
Consent Desk
Consent Architecture & Notices
A tool to create separate, clear consent notices for each purpose. It gives users a record of what they have picked and lets them withdraw their choice at any time.
Legal Basis: DPDP Act Section 6 (Clear consent requests and withdrawal of consent).
ROPAx
Data Inventory & Accountability
A tool to record data collection activities: what personal data you collect, why you collect it, who you share it with, and when you plan to delete it.
Legal Basis: DPDP Act Section 8 (Duties of Data Fiduciaries to maintain accurate processing records).
Gap Assessment
Readiness & Gap Analysis
A straightforward questionnaire that checks your data practices against key requirements under the DPDP Act and highlights where you need to take action.
Legal Basis: DPDP Act Section 8 and general accountability requirements.
How much do you know about privacy?
10 questions, about 2 minutes. Different questions each time.
A quick, fun check for beginners. You can download a fun result card at the end. It is not legal advice and not an official certification.
DPDP Act Architecture Reader
Scroll through the statutory sections of India's DPDP Act, 2023 to inspect how each legal mandate maps directly into working software components.
Lawful Grounds for Processing
Personal data may only be processed for a lawful purpose for which the Data Principal has given consent, or for certain legitimate uses recognized under Section 7 of the Act.
Notice Accompanying Consent Request
Before or at the time of requesting consent, the Data Fiduciary must give an itemised notice specifying the personal data sought, the specific purpose, how the Principal may exercise their rights, and how to make a complaint to the Board.
Standard of Valid Consent & Ease of Withdrawal
Consent must be free, specific, informed, unconditional, and unambiguous, signified by a clear affirmative action. The Data Principal has the statutory right to withdraw consent with the same ease with which it was given.
Data Fiduciary Accountability & Record Integrity
A Data Fiduciary is responsible for complying with the provisions of the Act irrespective of any agreement to the contrary, or whether personal data is processed by the Data Fiduciary or a Data Processor on its behalf.
Security Safeguards & Breach Mitigation
A Data Fiduciary must implement reasonable security safeguards, including technical and operational measures, to prevent personal data breach and maintain the confidentiality of records.
Mandatory Personal Data Breach Reporting
In the event of a personal data breach, the Data Fiduciary must give intimate notification of the breach to the Data Protection Board of India and each affected Data Principal in the prescribed form and manner.
Data Erasure on Purpose Completion
A Data Fiduciary must erase personal data as soon as the purpose for which it was collected is no longer being served, or as soon as consent is withdrawn, unless retention is mandated by law.
Processing of Children's Personal Data
A Data Fiduciary must obtain verifiable consent from the parent or lawful guardian before processing any personal data of a child, and shall not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
Right to Correction and Erasure of Personal Data
A Data Principal has the right to correction of inaccurate personal data, completion of incomplete data, updating of records, and erasure of personal data that is no longer necessary.
Grievance Redressal Mechanism
A Data Principal has the right to readily available grievance redressal provided by the Data Fiduciary or Consent Manager regarding performance of obligations under the Act.
Agent X Assistant
Interactive Legal Assistant for Indian Privacy Rules
I built Agent X to help anyone explore the requirements of India's DPDP Act, 2023. Ask questions about notice requirements, consent records, data fiduciary duties, and how each tool in this workshop functions.
Try asking Agent X
Click any example question to launch the assistant:
DPDP AI IntelligenceHow I build
Every tool starts with the law and ends with working software.
Read the law
I study the DPDP Act and Rules to understand what companies must actually do in daily operations.
Design the flow
I map out the user choices, clear notices, and retention timelines before writing any code.
Build and check it
I build the software with AI assistance, verify every rule by hand, and test with real-world examples.
Ameer Riaz
Privacy Professional
BBA LL.B. · LL.M. (Data Privacy and Information Technology)
Pursuing CIPP/E and DSCI
Bengaluru, Karnataka
I am a privacy professional based in Bengaluru, Karnataka. Holding a Master of Laws (LL.M.) in Data Privacy and Information Technology Law, I bridge the gap between statutory mandates and digital systems. I build practical tools so privacy rules become working software.
Have a question or want to test a tool?
Send me an email or connect on LinkedIn. I am always open to discussing privacy workflows and practical implementations.