Home / Resources / DPDP readiness score

Free tool

How ready are you for the DPDP Act?

Most obligations become enforceable on 13 May 2027. Answer twelve questions to see your score out of 100 and your biggest gaps.

—days to go
12questions
2 minto complete
Data inventory

Do you know what personal data you collect, where it is stored and why?

Notice

Do you give people a clear notice explaining what you collect and why?

Consent

Do you collect and record consent (or rely on another lawful ground) before processing?

Withdrawal

Can people withdraw consent as easily as they gave it?

Security safeguards

Do you have encryption, access control, logging and backups in place for personal data?

Breach response

Could you notify the Data Protection Board and affected people quickly after a breach?

Processors

Do all vendors that process personal data for you have a contract covering it?

Retention

Do you delete personal data when it is no longer needed for its purpose?

Rights requests

Can you handle requests to access, correct or erase personal data?

Grievances

Is there a published contact for privacy questions and complaints?

Children

If you process data of children, do you obtain verifiable parental consent?

Logs

Do you keep logs of access to personal data?

See InspireGRC on your own requirements

Bring a real questionnaire or your auditor's request list. 30 minutes, no scripted demo.

Talk to us