Resources · DPDP Centre
DPDP Centre
Everything you need to understand India's Digital Personal Data Protection framework and strengthen your organisation's readiness—in plain English.
- Est. 2012
- 100+ organisations served
- Bengaluru-based support
Readiness checklist
- Inventory of systems holding personal data
- MFA on email, VPN and critical apps
- Managed endpoint protection & patching
DPDP in brief
Key facts for business leaders
The Digital Personal Data Protection Act, 2023 governs how organisations process digital personal data in India. The DPDP Rules, 2025 were notified on 14 November 2025 and phase in most obligations over about 18 months.
For IT and operations teams, the most important obligations are to protect personal data with reasonable security safeguards, to handle personal-data breaches promptly—including notifying affected individuals and the Data Protection Board—and to retain data only as long as needed.
Readiness checklist
- Inventory of systems holding personal data
- MFA on email, VPN and critical apps
- Managed endpoint protection & patching
- Firewall and secure remote access
- Encryption of laptops and sensitive data
- Isolated, tested backups
- Security logging and monitoring
- Documented incident response plan
- Awareness training and vendor terms
Learn & act
DPDP resources
Free readiness scorecard
25 questions, 10 domains, instant score.
Practical DPDP guide
What the Act means for IT, and a 90-day plan.
Technology control framework
How requirements map to practical controls.
DPDP FAQs
Plain-English answers to common questions.
DPDP webinars
Sessions for business owners and IT leads.
Guides
Request our DPDP readiness checklist.
Explore more
Related services
Let's talk
Where do you stand today?
Take the free scorecard and get your DPDP readiness score in minutes.