DPDP Act Compliance
Get your business ready for the Digital Personal Data Protection Act before the 13 May 2027 deadline.
Quick answer
Our DPDP compliance service maps your personal data, rewrites your privacy notice and consent flows to meet Section 6 and Rule 3, sets up breach reporting (72-hour report to the Data Protection Board), retention and rights-request processes, and updates vendor contracts. It starts at ₹24,999 and is handled by qualified privacy and legal professionals.
| Professional fee | ₹24,999 + 18% GST |
|---|---|
| Government charges | No government fee |
| Time taken | 4–8 weeks for the core programme |
| Form / portal | DPDP Act, 2023 & Rules, 2025 |
| Documents | 4 items (listed below) |
| Done | 100% online |
What is DPDP Act Compliance?
The Digital Personal Data Protection Act, 2023 applies to every business that collects personal data digitally, whatever its size. Most duties under the DPDP Rules, 2025 apply from 13 May 2027, with penalties up to ₹250 crore per breach.
We take you from a data map to a working programme: notices, consent, security, breach response, retention and rights requests, in plain language your team can run.
- Deadline
- 13 May 2027
- Max penalty
- ₹250 crore
- Delivery
- 4–8 weeks
What's included in our DPDP Act Compliance service?
- Data mapping workshop and record of processing
- Gap assessment against the DPDP Act and Rules, with a prioritised fix list
- Privacy notice (Rule 3) and website privacy policy
- Consent and opt-in wording for forms, WhatsApp and email, with withdrawal flow
- Breach response plan with 72-hour Board report and CERT-In templates
- Retention schedule and data rights request process
- Data processing clauses for your vendors
- Staff awareness session
Who is eligible for DPDP Act Compliance?
- Startups, SMEs and corporates
- B2B and B2C businesses
- Foreign companies serving Indian users
What documents are required for DPDP Act Compliance?
- List of systems and tools that hold personal data
- Current privacy policy and website forms
- Key vendor contracts
- Name of the person responsible for data questions
What is the process for DPDP Act Compliance?
Discovery
A workshop to map what personal data you collect, why, where it goes and who can see it.
Gap assessment
We compare your practices with each DPDP obligation and give you a prioritised plan.
Documents and flows
Notice, privacy policy, consent wording, vendor clauses, retention schedule and breach plan.
Implementation support
We help your team change forms, CRM settings and processes, and train staff.
Review
A final check against the checklist, and an update before 13 May 2027.
How much does DPDP Act Compliance cost?
| Component | Amount | Paid to |
|---|---|---|
| CorpBridge professional fee | ₹24,999 | CorpBridge |
| GST on professional fee | ₹4,500 | Government (via CorpBridge) |
| Government fee / stamp duty | No government fee | Government, at actuals |
Your expert confirms the exact government charges for your case before you pay. Build a full package estimate →
Frequently asked questions about DPDP Act Compliance
When must my business comply with the DPDP Act?
Most duties apply from 13 May 2027. Consent manager rules apply from 13 November 2026, and the Data Protection Board provisions have applied since 13 November 2025.
Does the DPDP Act apply to small businesses?
Yes. There is no size threshold. If you collect names, phone numbers or emails digitally, the Act applies.
Do I need a Data Protection Officer?
Only Significant Data Fiduciaries must appoint one. Every other business must publish a contact person for data questions.
Is this a one-time service?
The core programme is one-time. We also offer an annual review to keep notices, vendors and processes up to date.
What is the cost of DPDP Act Compliance?
CorpBridge's professional fee is ₹24,999, exclusive of 18% GST, no government fee. The exact government charges are confirmed before you pay.
What documents are required for DPDP Act Compliance?
List of systems and tools that hold personal data; Current privacy policy and website forms; Key vendor contracts; Name of the person responsible for data questions.
Often taken together
Annual ROC Filing for Companies
AOC-4 / MGT-7Financial statements and annual return for Private Limited companies, with board and AGM minutes.
LLP Annual Filing
Form 8 / 11Statement of Accounts (Form 8) and Annual Return (Form 11) for LLPs.
Director KYC
DIR-3 KYCKYC for every DIN holder to keep the DIN active and avoid the ₹5,000 reactivation fee.
Not sure what to protect first?
Book a free 15-minute call. An IP expert will tell you which trademarks, patents or designs your business needs.