Free Quiz — No Login Required

Employee Privacy Awareness Quiz: Test Your Team's DPDP Knowledge

10 questions covering India's Digital Personal Data Protection Act 2023. Find out if your team is DPDP-ready before the May 2027 deadline.

10Questions

~3 minTo Complete

InstantScore & Feedback

May 2027Enforcement Deadline

Quick Answer

What should every employee know about DPDP? Every employee handling personal data must understand three things: (1) Personal data can only be collected with a clear consent notice explaining the purpose. (2) Individuals (Data Principals) have the right to access, correct, and erase their data — and the company must respond within 30 days. (3) A data breach must be reported to the Data Protection Board within 72 hours. This quiz tests all 10 core DPDP concepts your team needs to know before the May 2027 enforcement deadline.

Question 1 of 10 Score: 0 / 0

Your DPDP Privacy Score

Based on your answers across 10 key DPDP concepts

Your Answers — Review

Download the Full DPDP Employee Training Kit for Your Team

Get our complete employee privacy training pack: slide deck, policy templates, quiz bank, and facilitator guide. Used by compliance teams across India.

Training kit request received! We'll send it to your inbox within 24 hours.

Next Step: Get Your Full DPDP Readiness Score →

Frequently Asked Questions

What does the DPDP Act 2023 require from employees? ▼

Under the DPDP Act 2023, employees must handle personal data responsibly: collect only what is necessary, obtain valid consent before processing, respond to Data Principal rights requests within 30 days, and immediately report any data breach to their Data Protection Officer. Organisations must also provide DPDP awareness training to all staff who handle personal data.

What is the maximum penalty for a data breach under the DPDP Act? ▼

The maximum penalty for a significant data breach under India's Digital Personal Data Protection Act 2023 is ₹250 crore per violation. Penalties are determined and imposed by the Data Protection Board of India, which can also issue corrective orders alongside financial penalties.

How long does a company have to notify the Data Protection Board after a breach? ▼

Under the DPDP Rules 2025, companies must notify the Data Protection Board of India within 72 hours of becoming aware of a personal data breach. Affected Data Principals (the individuals whose data was breached) must also be notified without undue delay, in plain language, with details of the breach and remedial steps taken.

Every Sunday

The Sunday DPDP Brief

One real DPDP development explained in plain English, one practical how-to, one number from our own assessment data. Nothing else — no daily noise, no sales pitch.

No spam. Unsubscribe with one click, anytime.