DPDP Act, 2023: main obligations commence on 13 May 2027
Plan your DPDPA compliance--days
--hours
--minutes
--seconds
Practice areas / Data and Privacy
DPDPA Compliance
From first assessment to an operating privacy programme under India's data protection law
- DPDPA and GDPR assessments, privacy gap assessments, compliance roadmaps and implementation oversight
- Identifying data collection methods and mapping data flows
- Reviewing existing privacy practices, assessing compliance gaps and advising on risk mitigation strategies
- Vetting existing policies and drafting new policies in line with the assessment report
- Privacy notices, consent management and consent frameworks
- Data breach reporting policies in consonance with CERT-In requirements
- Data retention policy and Data Processing Agreements with vendors
- Vendor data protection assessments
- DPIAs, RoPA, data subject rights and privacy-by-design programmes
- Orientation sessions for different departments on the key provisions of the DPDPA, with proof-of-learning activities
- Transactional support: vetting and negotiating data privacy contracts
- External DPO advisory and continued support on applicable data privacy law requirements
Technical security assessments supporting data protection programmes are available through our affiliate, Majine Systems.
Insights on this topic
DPDPA
DPDP Rules 2025 Timeline: What Changes on 13 May 2027 and How Businesses Should Prepare
A practical guide to the phased commencement of India's DPDP Rules 2025: what applies now, what starts on 13 November 2026 and 13 May 2027, and a sequenced DPDPA compliance plan.
DPDPA
Consent Managers Under the DPDP Rules: What Changes on 13 November 2026
Rule 4 of the DPDP Rules 2025 brings India's Consent Manager framework into force on 13 November 2026. Registration conditions, obligations and what Data Fiduciaries should do now.