Free tool
DPDP readiness check
Most DPDP Act obligations apply from May 2027 under the DPDP Rules, 2025, with consent manager provisions from November 2026. Answer 12 quick questions to see how ready your organisation is and which gaps to fix first. It takes about 3 minutes and your answers stay in your browser.
How it works
- 1Answer 12 questions, one at a time, covering the main DPDP Act obligations: data inventory, lawful basis, notice, consent, children, rights, security, breach reporting, retention, processors, governance and cross-border transfers.
- 2For each question choose Yes, Partly or No. Yes scores 2 points, Partly 1 and No 0, out of 24.
- 3See your readiness score as a percentage, your readiness band, and a list of the gaps to fix, each with the action to take.
Your answers stay in your browser and are never sent anywhere.
Question 1 of 120% done
Frequently asked questions
The DPDP Rules were notified on 13 November 2025 with a phased start. Consent manager provisions apply from November 2026 and most obligations on data fiduciaries apply from May 2027. The government has discussed bringing some dates forward, so check the latest notifications.
No. It's a quick self-assessment to show where you stand. A proper gap assessment looks at your actual systems, contracts and records.
The Data Protection Board can impose penalties of up to ₹250 crore per instance, depending on the breach.