DPDP Readiness & Gap Assessment

Know exactly where your organisation stands on DPDP before the deadline does.

The Digital Personal Data Protection Act is being brought into force in stages. The obligations that apply to most organisations — and the penalties behind them — take effect in May 2027. Most organisations don't yet know their exposure. We do the finding thoroughly, and without the week's wait so you start your compliance journey from facts, not guesswork.

Book your gap assessment Download the DPDP self-assessment

A clear picture of your gaps. A prioritised path forward. Delivered by people who do this for a living.

Scroll to see how it works

The obligation is fixed. The readiness is not.

May 2027

The date the obligations that apply to most organisations take effect, and the penalty regime with them. Other provisions commence on their own timetable. It is set, and it is close.

Most aren't ready

A large majority of organisations have not begun structured implementation. The runway to build, test and embed compliance is shorter than it looks.

Serious penalties

Non-compliance carries substantial financial exposure. The Schedule sets a penalty for each provision breached — up to ₹250 crore for failing to take reasonable security safeguards. A single incident can breach more than one, and each carries its own penalty.

The recommended first move, across the board, is the same: a structured gap assessment to establish exactly where you stand. That is where we begin.

A thorough reading of where your data actually lives.

Our gap assessment is a structured engagement — not a questionnaire and a score. We move from understanding your business, to mapping your data in depth, to a clear and prioritised picture of your gaps.

Kick-off & Discussion

We start by understanding your business, your departments, and the policies and SOPs you already have in place so the assessment is grounded in how you actually operate.

Assess & Create

The deep groundwork: a full inventory of the personal data you hold and collect, its purpose, where it flows, who it's shared with, and how it moves across systems and borders.

Gap Assessment & Report

We measure that reality against what the Act requires, identify every gap, talk them through with you, and deliver both department-wise reports and a single consolidated view.

What you walk away with: a clear, prioritised picture of your exposure — the honest starting point for everything that follows.

Knowing the gaps is the start. We take you the rest of the way.

A gap assessment that hands you a list and walks away isn't much help. Our engagement continues through remediation and into your organisation's culture — so compliance is built, not just described.

Remediation & Implementation

Privacy design documentation — SOPs, procedures and templates
Data retention measures
Remediation & controls
Introduction of tools, once we know what they need to do
Data protection measures

Training & Awareness

Board and C-suite training
Department-wise training sessions
Ongoing awareness and regular updates for the whole organisation

From first assessment to a living compliance culture, one continuous engagement, with you at every step.