Interactive tool

DPDPA compliance checklist: 25 things to check before 13 May 2027

Work through the checklist, tick what you can honestly evidence, and see how ready you are. It runs in your browser only. Nothing you tick is stored or sent anywhere.

25checks in five groups
13 May 2027when the main duties apply
0data stored or sent from this page
~10 minto complete honestly
0 of 250%

Tick what you can honestly evidence. Nothing is stored or sent.

1. Know your data
2. Notice and consent
3. Security safeguards
4. Breaches and vendors
5. Rights, children and proof

Next steps

Anything unticked is your work list. The DPDPA compliance guide explains each item, and the DPDPA Readiness Playbook gives you templates and a 90-day plan.

See where you stand in about a minute.

Six questions on consent, rights, breach readiness and vendors. No sign-up needed to see the result.

Take the DPDPA check

?Frequently asked questions

Is this checklist legal advice?
No. It is a practical self-check based on the Act and the 2025 Rules. Have a qualified adviser confirm what applies to your organisation.
What score is good?
Aim for every box you can truthfully tick with evidence. Treat any unticked box in the security safeguards and breach groups as the first things to fix, because they map to the highest penalties.
Does it save my answers?
No. Everything stays in your browser tab and is gone when you close or reload the page.

§Sources

  1. Digital Personal Data Protection Rules, 2025 notified (Press Information Bureau)
  2. DPDPA Rules 2025: commencement and key changes (S.S. Rana & Co.)

Figures are quoted from the sources above and were checked on 6 November 2026. Laws and rules change; confirm the current text before relying on any of it. This is general information, not legal advice. Illustrative exhibits are marked as such.

Keep reading

Pillar guide

DPDPA compliance in India: what you have to do, and by when

India's data protection law is no longer a draft.

14 min read →Playbook · PDF

The DPDPA Readiness Playbook

From "where is our data?" to "here is our evidence" in 90 days. A working document for the people who will do the job.

Free download · 8 pages →Analysis

DPDPA penalties explained: what is at stake and how the Board decides

The headline figure is ₹250 crore.

7 min read →
Book a walkthrough

See it against your requirements.

Ask for a walkthrough, a pilot or a fit check for your regulator, your sector and your data.