Isha Johnson

I turn privacy rules into simple steps your business can actually follow.
About
Most small businesses collect customer data every day, but few know where it sits, who can see it, or what to do when a customer asks for it back. I help startups and growing businesses build clear, practical data protection basics under India’s DPDPA 2023 and the GDPR. No jargon, just simple documents and a clear list of what to fix first.
What I do
Data mapping: see where your customer data lives and flows
RoPA: one clean register of what you collect, why and who gets it
Consent and notice review: check that your forms, cookie banners and privacy notices are clear and compliant
DSAR support: a simple process for access, correction and erasure requests
DPIA screening: flag privacy risks before you launch a new feature or tool
Breach-response checklist: a calm, ready plan if something goes wrong
DPDPA readiness check: a quick gap review with a short priority list

I provide compliance support and documentation, not legal advice.