DPDP Act 2023 · DPDP Rules 2025
We take Indian businesses from “where do we start?” to working DPDP compliance: data mapping, notices and consent, security safeguards, breach response and rights handling, done with your team, not just documented for it.
Most obligations under the DPDP Rules apply eighteen months after publication of the Rules in the Official Gazette, i.e. in May 2027. Implementation takes months, so the time to start is now.
Does the DPDP Act apply to us?
If you process digital personal data of people in India, almost certainly yes. Some exemptions exist, and we confirm your position on the first call.
Do we need to appoint a Data Protection Officer?
A DPO is mandatory only for Significant Data Fiduciaries. Every other organisation must publish the contact details of a person who can answer questions about its processing of personal data.
How long does implementation take?
It depends on how much personal data you handle and how many systems and vendors are involved. We give you a timeline in the proposal.
What does it cost?
We quote a fixed price after the free call, once we understand your scope.
Free 30-minute call. No obligation.