A structured, evidence-based review of how your organisation actually handles personal data against the DPDP Act 2023 and DPDP Rules 2025 — not a policy-document read-through. You get a scored list of what's covered, what's missing, and what to fix first.
The assessment walks through every area where a real DPDPA gap tends to hide, cross-checked against what your systems and contracts actually do.
Whether notices and consent capture are itemised by purpose, or one static policy page standing in for both.
Whether a real record of what data you hold, where it flows, and why, exists anywhere your team can point to.
Technical and organisational safeguards mapped against Section 8(5) and Rule 6 — not a generic security checklist.
Whether your incident plan would actually meet the Section 8(6) notification timelines and content requirements.
Whether existing agreements actually cover what the Act requires from parties processing data on your behalf.
Where your processing touches a child's data, whether the additional consent and verification obligations are met.
How personal data leaving India is currently handled, checked against the Act's cross-border transfer provisions.
Whether Data Principal requests — access, correction, erasure — have an actual operational path today.
Every finding traces back to what was actually reviewed — no unexplained scores, no vague "needs improvement" lines.
No fixed duration is quoted here — scope depends on how many systems and business units are involved.
Confirm which systems, data flows and business units are in scope, and gather the documentation that already exists.
Review policies, contracts and system configurations directly, rather than taking existing documentation's word for it.
Every gap is recorded against the specific Act or Rules provision it relates to, and scored for exposure and effort to fix.
A walkthrough of the findings with your team, and a sequenced roadmap for what to address first.
A Gap Assessment is the starting point for almost everything else on this site — 30 minutes to talk through scope, no obligation.
Book a Consultation