Case study ยท Healthcare
DPDP Act readiness for a hospital
A cross-functional discovery to map patient data flows and safeguards against DPDP Act obligations.
The challenge
Where they started.
With the DPDP Rules notified in November 2025 and obligations phasing in, an existing healthcare customer asked Provision to check how ready they were. Patient data is spread across the hospital information system, lab and imaging systems, billing and email, and the hospital needed a clear picture before deciding what to fix first.
What we delivered
Scope of work.
- An on-site discovery visit by a cross-functional team: a security engineer, a customer success manager and a sales consultant.
- Mapping of where patient personal data is collected, stored and shared.
- Review of access control, endpoint protection, backup and incident handling against DPDP safeguard expectations.
- Preparation of a prioritised readiness roadmap covering safeguards, notices, consent and breach response.
Outcomes
What the client now has.
A data map of patient information across systems
Gaps ranked by risk and effort
A roadmap aligned to the DPDP phase-in timeline
A foundation for ongoing compliance support
Let's talk
Facing a similar challenge?
Tell us about your environment and goals. We will share how we would approach it.