Self-Serve Readiness Diagnostic
DPDPA Statutory Maturity Assessment
Answer 9 quick operational questions to calculate your organization's statutory compliance index and identify your highest penalty exposures.
Section 5Notice & Language
Are your privacy notices itemised and accessible in English and any of the 22 Eighth Schedule Indian languages?
Section 6Consent Proof
Do you store cryptographic, court-admissible SHA-256 evidence of affirmative consent for all active customer records?
Section 6(2)Dark Patterns
Have you eliminated pre-ticked checkboxes, forced consent bundling, and deceptive UI nudges across your app?
Section 8(2)Vendor DPAs
Do you have executed Data Protection Agreements (DPAs) with mandatory 24-hour breach clauses with all cloud & SaaS vendors?
Section 8(5)Encryption at Rest
Is all customer personal data encrypted using AES-256 at rest and TLS 1.3 in transit across all databases and backups?
Section 8(6)Dual Regulatory Clock
Do you have an automated incident playbook capable of notifying CERT-In in 6h and the DPB within 72h?
Section 8(7)Data Erasure Lifecycles
Are customer records automatically purged upon purpose completion, with verifiable PDF deletion certificates?
Section 9Children's Age Gating
Do you verify age and obtain Verifiable Parental Consent (VPC) before collecting any data from users under 18?
Section 11-14Citizen Rights Portal
Can users submit self-service Access, Correction, Erasure, and Nominee requests through a dedicated portal?