Covers: Digital Personal Data Protection Act, 2023 · Digital Personal Data Protection Rules, 2025 · DPDP enforcement transition milestones
Answer each DPDP control as Implemented, In Progress, Not Started, or Not Sure. The assessment then gives you a readiness score, top gaps, and a remediation report.
Control codes map to the DPDP Act, 2023 and final DPDP Rules, 2025: S means Act Section, R means Rule, and OPS means implementation evidence needed to operate the control. Example: S8(5)/R6 maps to security safeguards, while S8(6)/R7 maps to breach notification.
Note: This tool is a practical readiness checklist, not legal advice. For regulated entities, DPDP controls should be aligned with RBI, SEBI, CERT-In and sector-specific obligations.
Step 1 — Answer each control question for your organisation
Infosek helps fintechs, SaaS companies and regulated entities turn DPDP obligations into working controls, policies and audit-ready evidence.