SupaTrust
DPDP Act 2023 · Rules 2025 in force

Is your business ready for
₹850+ Cr in DPDP penalties?

India's Digital Personal Data Protection Act is enforceable now. Take the free LITE gap assessment — 32 questions, no login, instant indicative exposure estimate.

Full platform →

Free · No login · ~15 minutes

Penalty schedule under the DPDP Act

Five penalty tiers — cumulative exposure can exceed ₹850 Cr per adjudication.

₹250 Cr
Security & Data Breach
Schedule Item I
₹200 Cr
Failure to Notify Breach
Schedule Item II
₹200 Cr
Children's Data Violations
Schedule Item III
₹150 Cr
SDF Non-Compliance
Schedule Item IV
₹50 Cr
General Obligations
Schedule Item V

Enforcement timeline

Phase 1 · Now
Act in force
DPDP Act 2023 notified. Board to be constituted. Obligations crystallising.
Phase 2 · 2026
Rules enforceable
DPDP Rules 2025 in effect. Consent managers operational. Cross-border lists published.
Phase 3 · May 2027
Full enforcement
Board adjudicating penalties. Data Auditors operational. Full SDF obligations active.

What the assessment covers

Eight compliance domains mapped to every penalty-bearing obligation in the Act.

🏢
Entity Profile
Data Fiduciary classification, SDF status, applicability
📋
Notice & Consent
Consent collection, purpose limitation, withdrawal flows
🔒
Security Safeguards
Technical and organisational data-protection measures
🚨
Breach Management
72-hour notification to Board and affected Data Principals
👧
Children & Disability
Verifiable parental consent, prohibition on tracking
⭐
Significant Data Fiduciary
DPIA, audit, DPO, algorithmic accountability
🌐
Cross-Border Transfers
Government-notified country allowlist compliance
🏛️
Governance
DPO appointment, grievance redressal, Data Principal rights
Free · No login · ~15 minutes

DPDP LITE Gap Assessment

32 questions · penalty-cited · indicative exposure in ₹ crore · instant results

1
Your information
2
Assessment
3
Results

Tell us about your organisation

Your results and a copy of the report will be emailed to you.

Free · No card · Indicative estimate only — not legal advice

Free · No login required

Cookie & Tracker Scanner

Find out which cookies and third-party trackers your website sets — and whether they need consent under the DPDP Act & ePrivacy rules.

Frequently asked questions