DPDP enforcement deadline: May 2027Rules notified Nov 2025Penalty exposure up to ₹250 Cr

Quick Answer

DPDP compliance status depends on four pillars: (1) valid consent for every processing purpose, (2) a complete data inventory, (3) security safeguards proportionate to the data processed, and (4) a working grievance mechanism. Organisations that have addressed all four have a strong baseline. Most organisations have gaps in at least two.

DPDP Compliance Status Checker

Instant compliance status across all four DPDP Act pillars — consent, data inventory, security, and rights mechanisms.

DPDP Compliance Checker

Get the Full Compliance Guide (Free)

Frequently Asked Questions

What is the DPDP compliance deadline?+
The DPDP Act 2023 enforcement deadline is May 2027. Organisations should aim to have baseline compliance in place by Q4 2026 to allow time for testing and gap closure before enforcement begins.
What is the minimum DPDP compliance requirement?+
Minimum: (1) a published, DPDP-compliant privacy policy, (2) purpose-specific consent mechanisms, (3) a named Grievance Officer with published contact, and (4) a data inventory of all personal data processed. Additional requirements apply for Significant Data Fiduciaries.
How long does DPDP compliance take?+
For a mid-sized organisation (200–1000 employees), a comprehensive DPDP compliance programme typically takes 3–6 months. A minimum viable compliance baseline can be achieved in 4–8 weeks with focused effort.

Related DPDP Tools

Every Sunday

The Sunday DPDP Brief

One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.

No spam. Unsubscribe with one click, anytime.