Free checklist
DPDP Act Readiness Checklist
A systems-focused checklist for the DPDP Act 2023 and DPDP Rules 2025. Map your personal data, put the Rule 6 safeguards in place, prepare for breach reporting and erasure, and split the work between your tech team and your counsel before 13 May 2027.
PDF · 15 pages · Updated October 2026
For: Founders, CTOs and security leads of businesses that handle personal data of people in India.
Get the checklist
What’s inside.
- Where things stand
- Does it apply to you, and in what role?
- Map your personal data
- Security safeguards (Rule 6)
- Breach response (Rule 7)
- Retention and erasure (Rule 8)
- Consent, notices and rights requests
- Processors and vendors
- Penalties
- A 90-day readiness plan
What you’ll be able to do.
- Know where the Act and Rules stand, and the date that matters for your systems: 13 May 2027.
- Map the personal data you hold, where it lives and who can reach it.
- Put the Rule 6 safeguards in place, with evidence for each.
- Be ready to report a breach without delay, and in detail within 72 hours.
- Split the work between your tech team and your counsel, with a 90-day plan.
Rather have us do it?
DPDP readiness, run by our 24/7 team. We reply within one business day.