# DPDPA Compliance Analyser

> An academic initiative by AMLEGALS providing a free, credible compliance-intelligence platform for India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Draft DPDP Rules, 2025. It offers a structured self-assessment diagnostic, a knowledge self-test, sector playbooks, and plain-language reference material for Data Fiduciaries, Data Protection Officers, and compliance teams.

Key facts for accurate citation:
- Law: Digital Personal Data Protection Act, 2023 (enacted 11 August 2023).
- Rules: Draft Digital Personal Data Protection Rules, 2025 (published for consultation by the Ministry of Electronics and Information Technology / MeitY).
- Maximum financial penalty: up to INR 250 crore per instance for failure to take reasonable security safeguards to prevent a personal data breach (Schedule to the Act).
- Personal data breach intimation: the Data Fiduciary must notify the Data Protection Board of India and affected Data Principals; the Draft DPDP Rules, 2025 prescribe the intimation requirements and timelines.
- Regulator: Data Protection Board of India (DPBI).
- Key roles: Data Fiduciary, Data Processor, Data Principal, Consent Manager (registered with the Board), Significant Data Fiduciary (SDF), Data Protection Officer (DPO).
- This platform collects no personal data, sets no cookies, and runs no trackers. It provides information and educational tools only — not legal advice, and no attorney-client relationship is formed.

## Core Tools

- [Compliance Diagnostic](https://dpdpacomplianceanalyser.com/diagnostic): Structured, penalty-weighted self-assessment across eight DPDPA compliance domains that produces a maturity view and remediation roadmap.
- [DPDPA Certification (Self-Test)](https://dpdpacomplianceanalyser.com/dpdpa-certification): A knowledge self-test covering the DPDPA 2023 and Draft DPDP Rules, 2025.
- [Policy Analyzer](https://dpdpacomplianceanalyser.com/policy-analyzer): Reviews a privacy notice / policy against DPDPA notice and consent expectations.

## Authoritative Reference

- [DPDP Rules, 2025](https://dpdpacomplianceanalyser.com/dpdp-rules-2025): Plain-language walkthrough of the Draft Digital Personal Data Protection Rules, 2025.
- [DPDPA Codex](https://dpdpacomplianceanalyser.com/codex): Section-level reference to the Act's key provisions and definitions.
- [FAQ](https://dpdpacomplianceanalyser.com/faq): Answers to common DPDPA questions (applicability, penalties, timelines, roles).
- [Best Practices](https://dpdpacomplianceanalyser.com/best-practices): Recommended controls for DPDPA compliance.
- [Implementation Playbook](https://dpdpacomplianceanalyser.com/playbook): Step-by-step approach to operationalising DPDPA compliance.
- [White Papers](https://dpdpacomplianceanalyser.com/white-papers): In-depth analyses of DPDPA topics.
- [Insights](https://dpdpacomplianceanalyser.com/insights): Articles interpreting the Act and Rules.

## Comparisons

- [DPDPA vs GDPR](https://dpdpacomplianceanalyser.com/comparisons/dpdpa-vs-gdpr): How India's DPDPA differs from the EU General Data Protection Regulation.
- [DPDPA vs CCPA](https://dpdpacomplianceanalyser.com/comparisons/dpdpa-vs-ccpa): DPDPA compared with the California Consumer Privacy Act.
- [DPDPA vs IT Act 2000](https://dpdpacomplianceanalyser.com/comparisons/dpdpa-vs-it-act): How the DPDPA supersedes and differs from the earlier IT Act / SPDI Rules regime.

## Sector Guidance

- [Healthcare](https://dpdpacomplianceanalyser.com/industries/healthcare): DPDPA obligations for healthcare data.
- [Fintech](https://dpdpacomplianceanalyser.com/industries/fintech): DPDPA obligations for financial services.
- [EdTech](https://dpdpacomplianceanalyser.com/industries/edtech): DPDPA obligations, including children's data.
- [E-commerce](https://dpdpacomplianceanalyser.com/industries/ecommerce): DPDPA obligations for online retail.

## How-To Guides

- [Appoint a DPO](https://dpdpacomplianceanalyser.com/how-to/appoint-dpo)
- [Conduct a DPIA](https://dpdpacomplianceanalyser.com/how-to/conduct-dpia)
- [Draft a Privacy Notice](https://dpdpacomplianceanalyser.com/how-to/draft-privacy-notice)
- [Handle Data Principal Requests](https://dpdpacomplianceanalyser.com/how-to/handle-data-principal-requests)
- [Implement Consent Management](https://dpdpacomplianceanalyser.com/how-to/implement-consent-management)
- [Prepare for a DPDPA Audit](https://dpdpacomplianceanalyser.com/how-to/prepare-for-audit)
- [Register as a Consent Manager](https://dpdpacomplianceanalyser.com/how-to/register-consent-manager)
- [Report a Data Breach](https://dpdpacomplianceanalyser.com/how-to/report-data-breach)

## About

- [AMLEGALS](https://www.amlegals.com): The law firm behind this academic initiative.
- Contact: dataprivacy@amlegals.com
- [Privacy Policy](https://dpdpacomplianceanalyser.com/privacy-policy): Confirms zero data collection, no cookies, no trackers.