Digital Personal Data Protection Act 2023 · Rules 2025
Find out which DPDP obligations apply to you, and what you are exposed to.
Seventeen questions. Five minutes. No email needed. Every obligation traced to the section or rule that requires it.
247 days until substantive obligations bite · 13 May 2027
Sample result · edtech, 1–10 lakh users Release 2026.09.4
161 of 217 obligations apply
45
carry a ₹250 cr cap
25
at ₹200 cr
1
at ₹150 cr
90
at ₹50 cr
Security 22
Consent 17
Children 15
and 13 more areas · which obligations they are is what the call is for
This is your exposure, not your readiness. We asked you questions; we did not look at your
systems.
Gazette text
Built on G.S.R. 846(E), not summaries.
217 obligations
Each traced to its section, rule or schedule.
Release 2026.09.4
Updated when MeitY publishes.
How it works
Three steps, and the first two need nothing from you but answers.
1 · Answer 17 questions
Children, employees, sector, exemptions. “Not sure” is always an answer, and it counts against you, not for you.
2 · See how much of the law applies
How many obligations apply, what they are capped at, and which areas of your business they sit in. On screen, no email.
3 · Take it further
Get the numbers by email, or book thirty minutes with us and we start from your result, not from a blank page.
Who it is for
Any organisation that handles personal data of people in India. Start with your sector and the check pre-fills what it can.
Answer your customer's DPDP question with one link.
Start the check