Book a free consultation
Free tool · 188 days to the DPDPA deadline

Is your business DPDPA-ready?

Answer 15 quick questions to get a DPDP readiness score, weighted by penalty risk, and a prioritised list of what to fix before 13 May 2027.

0 of 15 answered · takes about 3 minutes · nothing is sent to us

  1. 1Do you have a written list of the personal data you collect, where it is stored and who receives it?
  2. 2Does every form, app and WhatsApp flow show a clear notice of what data you collect and why?
  3. 3Is consent for marketing a separate, unticked opt-in (no pre-ticked boxes)?
  4. 4Can people withdraw consent or unsubscribe as easily as they gave it?
  5. 5Do you keep a record of when and how each person gave consent?
  6. 6Is access to personal data limited to the staff who need it?
  7. 7Is personal data encrypted or masked, in storage and in transit?
  8. 8Do you keep access and activity logs for at least one year?
  9. 9Do you have a written breach plan that can produce a report to the Data Protection Board within 72 hours?
  10. 10Do contracts with vendors who handle personal data (CRM, cloud, payroll, marketing) include data protection terms?
  11. 11Have you set retention periods, and do you delete data you no longer need?
  12. 12Have you published a contact person (or DPO) for data questions on your website?
  13. 13Can you handle access, correction and erasure requests within 90 days?
  14. 14If you collect data of anyone under 18, do you get verifiable parental consent?
  15. 15Have the staff who handle personal data been trained on the DPDP Act?

How the score works

Each question maps to a duty under the DPDP Act, 2023 and DPDP Rules, 2025. Duties with the highest penalties (security safeguards up to ₹250 crore; breach reporting and children's data up to ₹200 crore) count three times; core process duties count twice; the rest once. "Partly" earns half marks.

Next steps: the full DPDP checklist, the DPDPA 2027 roadmap, free DPDP templates, and what compliance costs.

Frequently asked questions

How do I check if my business is DPDP compliant?

Check 15 areas: data mapping, notice, consent and withdrawal, consent records, access control, encryption, logs, breach reporting, vendor contracts, retention, a published contact person, rights requests, children's data and staff training. This checker scores each one, weighted by the penalty it carries.

Is the DPDP readiness checker free and confidential?

Yes. It runs in your browser and nothing you select is sent to us, unless you choose to request a callback.

What score do I need to be DPDP compliant?

There is no official score. Aim to answer 'yes' to every applicable question with evidence by 13 May 2027, starting with the high-risk areas: security, breach reporting and children's data.

WhatsApp us