Automated Compliance: A Privacy-Focused Solution for GDPR and DPDPA Adherence

This paper explores the possible automation of Governance, Risk, and Compliance (GRC) concerning various evolving privacy regulations-specifically, the General Data Protection Regulation (GDPR) and the Digital Personal Data Protection Act (DPDPA). With the increasing complexity of regulatory requirements, especially regarding data privacy, there is also a growing need for an automated GRC solution that will help organisations make sure to adhere to all applicable laws and regulations. The proposed compliance checker tool aims at the automation of several aspects of the audit process. This tool will be a starting point for compliance for organisations, more so for small and medium enterprises (SMEs), which are often beset with issues such as financial problems, lack of expertise, and vendor concentration on thirdparty risk management. The evaluation of this tool on a dataset of 50 websites (25 non-compliant and 25 compliant) yielded promising results, achieving an accuracy of 86%, a recall rate of 92%, and an F1 score of 86.79%. This work has shown that automation of such processes can significantly, if not completely, reduce compliance errors, lower operational costs, and speed up the proceeding audits and assessments, thereby making automation a strong enablement for organisations in the complex regulatory environment to improve the level of compliance for better handling of customer privacy.