Skip to main content

Free tool

DPDP readiness self-check.

Twelve questions on India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, whose main duties apply from 13 May 2027. Get a readiness band, a per-area chart and your top gaps.

Questions

  1. Question 1: Do you give people a clear notice before or when you collect their personal data?
  2. Question 2: Do you process personal data only with valid consent or for a legitimate use under the Act?
  3. Question 3: Do you know whether you process children's personal data, and get verifiable parental consent where you do?
  4. Question 4: Do you have reasonable technical and organisational security safeguards for personal data?
  5. Question 5: Is access to personal data limited to the people and systems that need it?
  6. Question 6: Do you have a process to notify the Data Protection Board and affected people after a personal data breach?
  7. Question 7: Has your team practised that breach process, for example in a tabletop exercise?
  8. Question 8: Can people exercise their rights over their data through a clear, published process?
  9. Question 9: Do contracts with vendors who process personal data for you say how they must protect it?
  10. Question 10: Do you delete personal data once it is no longer needed for its purpose?
  11. Question 11: Do you have an inventory of what personal data you hold, where and why?
  12. Question 12: Have you published contact details for a person who can answer questions about how you process personal data?

0 of 12 answered

Runs in your browser; nothing is stored. This is a self-check, not legal advice.

[02]Contact

Let's build what's next.

Tell us about your infrastructure, security or automation goals. We reply with questions, then a written plan with scope and next steps.

Response
Usually within one business day
Location
Worldwide

What happens next

  1. 01

    Reply

  2. 02

    Discovery call

  3. 03

    Proposal

We use these details to reply to your enquiry and, if you allowed advertising cookies, to measure which ads lead to enquiries. Our Privacy Notice explains retention and your rights.

This page is general guidance, not legal advice. Last reviewed October 2026.