Plain-English guides on getting your business ready for India's DPDP Act 2023 — and keeping your data clean enough to comply.
A practical self-serve audit guide for Indian MSMEs covering pre-consent script trackers, equal-prominence cookie banners, Section 5 notice requirements, and Grievance Officer disclosures.
Read the guide → New · Section 8(10) GROStatutory GRO duties, 90-day grievance resolution SLA caps under DPDP Rules 2025, website disclosure blocks, and free appointment letter templates.
Read the guide → New · Rule 6(f) DPASection 8(8) vendor processing requirements, 24-hour breach notification SLAs, sub-processor restrictions, and signature-ready DPA templates.
Read the guide → New · Section 5 NoticeItemized processing purposes, 22 8th Schedule language requirements, consent withdrawal links, and plain-language notice templates.
Read the guide → New · Penalty ScheduleStatutory penalty caps up to ₹250 crore, Section 33(2) mitigating and aggravating factors, and exposure calculation for Indian businesses.
Read the guide → New · DPDP Rules 2025The November 2025 notification, the phased 18-month timeline, the 1-year log-retention rule, the 90-day grievance cap — and your next-90-days plan before 13 May 2027.
Read the guide → DPDP Act 2023 · ConsentThe five tests of valid consent, the notice requirements, withdrawal parity, when you don't need consent at all — and why you must be able to prove all of it.
Read the guide → DPDP Act 2023 · CookiesThe Act never says "cookie" — but identifiers that single out a person are personal data. What a compliant banner looks like, and the dark patterns that break it.
Read the guide → DPDP Act 2023 · Consent ManagersThe registered intermediary framework arriving ~November 2026, the naming trap around "consent management tools", and what your business actually needs instead.
Read the guide → DPDP Act 2023 · GuideWho it applies to, the 9 obligations in plain English, the penalties, the enforcement timeline, and a step-by-step readiness checklist.
Read the guide → DPDP Act 2023 · PenaltiesWho imposes penalties, the full schedule in plain English, how one incident can stack several instances, and how to shrink your exposure.
Read the guide → DPDP Act 2023 · Compliance guideEvery data fiduciary needs a published grievance contact. How the role differs from a DPO, who to appoint, and the setup checklist.
Read the guide → DPDP Act 2023 · How-toYou can't delete, secure or report on data you can't find. A practical 5-step method to build the data inventory everything else depends on.
Read the guide → Data quality · GuideHow duplicates happen, what dirty data really costs in sales time and decisions, the DPDP angle, and the four-step cleanse that fixes it.
Read the guide →Send us a note — we reply within one working day.