01 / 05
Consent, asked for properly
Non-essential cookies and third-party tags wait for a yes. Refusing has to be offered as plainly as agreeing, and withdrawing has to be as easy as consenting was.
DPDP Act 2023 · s.6
Enforcement deadline approaching
Is your website DPDP ready?
Free automated audit against India's Digital Personal Data Protection Act 2023. Get your readiness score before the May 14, 2027 enforcement deadline.
Days
Hours
Minutes
Seconds
0 days, 0 hours, 0 minutes and 0 seconds until the DPDP enforcement deadline.
May 14, 2027
100k+
Customers protected
₹250Cr
Max penalty under DPDP
10
DPDP checks per audit
0–100
Readiness score
The timeline
Where the DPDP deadlines fall
The Act is law and the Rules are notified. What is left is the runway — and it ends on one date.
- 1
November 2025
The Rules are notified
The DPDP Rules were notified and the Data Protection Board came into being. The obligations themselves were given a runway instead of being switched on that day — which is the only reason there is still time to prepare.
Already in force
- 2
The runway
Blueprint phase
Know what personal data you hold, where it flows and who touches it. Notice and consent, withdrawal that is as easy as agreeing, a named Grievance Officer, retention limits and a breach drill get built now — and the consent manager framework takes effect a year in.
You are here
- 3
May 14, 2027
₹250 crore penalty
The remaining duties bite in full: itemised notice, reasonable security safeguards, breach reporting to the Board, erasure once the purpose is served, and the rights of every Data Principal. From that date the Data Protection Board can impose penalties — up to ₹250 crore for failing to keep personal data secure, and up to ₹200 crore for not reporting a breach. The data you already hold is not grandfathered; it needs its notice too. That is the risk you are managing between now and then.
Penalties up to ₹250 crore
Dates follow the DPDP Act 2023 and the Rules notified under it. ₹250 crore and ₹200 crore are ceilings the Data Protection Board may impose — for a failure of security safeguards and for not reporting a breach — not fixed penalties. This is a summary, not legal advice.
The five duties this audit checks
02 / 05
A notice people can read
Every category of personal data, and every purpose it is used for, set out in plain language, in a notice that is actually reachable from your pages.
DPDP Act 2023 · s.5
03 / 05
Rights people can use
Access, correction, erasure, nomination and grievance redressal — described in the notice, and reachable in practice rather than in principle.
DPDP Act 2023 · s.11 to s.14
04 / 05
Someone to complain to
A named point of contact with an email address or a phone number published, not a role mentioned in passing with no way to reach it.
DPDP Act 2023 · s.13(3)
05 / 05
Kept safe, then let go
Reasonable safeguards on the wire and in storage, a stated retention period, and deletion once the purpose the data was collected for is served.
DPDP Act 2023 · s.8(5), s.8(7)
How it works
See where your site stands under the DPDP Act
Three steps, nothing to install. Here is what happens when you audit your site.
- 1
Step #1
Enter your website
Type your domain and the scan starts straight away. It reads your site the way a visitor's browser reaches it — home page, privacy notice, consent banner, robots and sitemap — so there is nothing to install and no access to hand over.
Takes 5-60 seconds
- 2
Step #2
Ten DPDP duties, checked
Consent taken before processing, refusal as easy as agreeing, an itemised notice, the rights of the data principal, a contactable Grievance Officer, retention and security safeguards — each read against the section of the DPDP Act 2023 it answers to.
10 checks · DPDP Act 2023
- 3
Step #3
Fix what matters first
You get a readiness score out of 100 and every finding ranked by what it costs you, with the evidence behind it and the clause it belongs to — so the work is ordered well before enforcement lands on May 14, 2027.
Free report · Score out of 100
Free risk check first. Formal DPDP compliance audit if the gaps are real.
This free DPDP audit helps Indian companies identify whether customer data, employee data, vendors, processors, consent flows, breach workflows and retention practices need deeper review. If the score shows exposure, the next step is a formal Digital Personal Data Protection audit with consentcenter.io.
- Customer data
- Employee data
- Vendors
- Processors
- Consent flows
- Breach workflows
- Retention practices
Ready to check your website?
Run a free DPDP compliance audit in under a minute. No signup, no installation — just enter your domain.
Start your free audit