DPDP Readiness Checker
Answer 10 questions about your data practices and get an instant readiness score for India's Digital Personal Data Protection Act, with a prioritised list of gaps to address.
Tool details
About this tool
A 10-question diagnostic that scores your readiness for India's Digital Personal Data Protection Act, 2023. The questions map to the obligations the Data Protection Board of India will enforce first — consent, DPO, cross-border transfers, breach notification and the Significant Data Fiduciary trigger.
What you'll get
- An overall readiness score (0–100%) with a traffic-light band.
- A prioritised gap list naming the specific DPDP obligation each gap maps to.
- A concrete remediation action for every failed question.
- A sign-posted route to TruePrivacy workflows that close each gap.
How it works
- Each 'yes' answer scores one point; the score is the percentage of controls in place.
- 70% or higher is ‘DPDP Ready’. 40–69% is ‘Partially Ready’. Below 40% means the Significant Data Fiduciary workflow would fail an audit today.
- No data is sent anywhere — the quiz runs entirely in your browser.
Based on
- Digital Personal Data Protection Act, 2023.
- DPDP Rules 2025 (notified 14 November 2025).
- Data Protection Board of India consultation notes on grievance redressal.
Do you have a documented consent management system in place?
A system that captures, stores, and manages user consent for personal data processing.
Frequently asked questions
What is the DPDP Readiness Checker measuring?+
Ten obligations the DPDP Act 2023 and the DPDP Rules 2025 impose on Data Fiduciaries — the controls the Data Protection Board inspects when a grievance is filed or a breach is reported.
Does the readiness score tell me if I'm a Significant Data Fiduciary (SDF)?+
No. SDF designation is made by the Government by notification based on volume, sensitivity and risk. The quiz checks the obligations an SDF would additionally have to meet, so a lower score is a stronger reason to prepare for designation.
Does it work for processors as well as fiduciaries?+
Yes. Processors (what the DPDP Act calls Data Processors) carry the same operational obligations through their fiduciary's instructions, and ten of ten questions still apply.
How often should I re-take the assessment?+
Quarterly during an active roll-out, and after any new regulation (CERT-In directions, SDF notifications, Rules revisions) or a material change in your processing stack.
Can I export the result?+
The score and the gap list are rendered on-page for screen-grab or print. For an audit-grade export with evidence links, start a TruePrivacy free trial and run the full assessment from the DPO workspace.
Other tools you might find useful
Need more than a free tool?
TruePrivacy is a full privacy operations platform. Automate DSRs, consent, vendor risk, and breach response.
Free 14-day trial · No credit card required · Setup in minutes