Free DPDP Act 2023 Risk Assessment

DPDP Compliance Risk Calculator

Evaluate your organization's exposure to DPDP penalties in under 3 minutes.

8 questions · under 3 minInstant risk scoreBased on DPDP Act penalty schedule

Data Topology

Scale & sensitivity of your user base

This determines your Significant Data Fiduciary (SDF) status.

Drag to set
SDF · 10 L
01 Cr+

Processing minor data triggers Section 9 penalties up to ₹200 Cr.

Consent Infrastructure

Transparency & consent tracking

DPDP mandates notice in a language the principal understands. Partial compliance still attracts penalties.

Manual tracking is a major risk factor — auditors require machine-readable consent records.

Data Principal Rights

Erasure & access request handling

Cascading erasure across vendor chains is a top compliance gap for most organisations.

DPDP mandates timely responses to data access requests. Manual email handling is the highest-risk approach.

Breach & Accountability

Notification readiness & DPO setup

Failure to notify within 72 hours carries up to ₹250 Cr in fines regardless of breach severity.

SDFs without an India-based DPO face additional structural penalties under DPDP rules.

Live risk reading

0/ 100
Awaiting input
Questions answered0/8

Exact ₹ figures shown after assessment