DPDP readiness self-check

Tick each statement that is demonstrably true today. Your answers stay in this browser and are not submitted or stored.

DPDP readiness questions

We maintain a current map of the personal data we collect, its purpose, location, recipients and retention period.

Each processing activity has a documented lawful purpose and an identified basis under the Act.

Our notices are clear, itemised and connected to each collection point.

Where we rely on consent, we record it and make withdrawal comparably easy.

We can receive, verify, track and fulfil access, correction, erasure and grievance requests.

Retention periods and evidenced erasure procedures cover live systems, processors and backups.

Processor and vendor arrangements contain appropriate privacy, security, deletion and incident obligations.

Reasonable security safeguards are documented, assigned, tested and reviewed.

We have a tested personal-data-breach response plan and notification templates.

Children’s data, Significant Data Fiduciary exposure and applicable exemptions have been assessed.

DPDP readiness report

Assessment date:

Overall indicator:

Priority actions

Directional self-assessment only. This is not legal advice, certification or an audit conclusion.

Important: This is a directional self-check, not a legal opinion, certification or audit conclusion. A “yes” should be supported by current evidence.

Discuss a formal gap assessment

DPDP Ready

Practical compliance with India's Digital Personal Data Protection Act, 2023 — advisory, frameworks and audit-ready processes.

dpdp@ca-ap.org
+91 92834 11637

Site

Services
DPDP Act Guide
About
Contact

Legal

Privacy Notice