Free DPDP compliance checker: is your website ready for May 2027?

India’s Digital Personal Data Protection Rules take full effect on 13 May 2027, with penalties of up to ₹250 crore. Enter a website to check its privacy notice, grievance contact, rights, cookie consent and trackers against the Act, and get a score with the fixes.

When does the DPDP Act apply to my website?

The DPDP Rules 2025 were notified on 13 November 2025. Notice, consent, security, breach reporting, retention and rights obligations come into force on 13 May 2027. Any business that collects personal data of people in India through its website is covered, whatever its size.

Is a high score the same as being compliant?

No. This tool reads public pages only. It cannot see your contracts with processors, how long data is really kept, your security controls or your breach plan. Treat the score as a first check and the fix list as a starting point, not legal advice.

Does a small business need a cookie banner?

If the site loads analytics or advertising tools that collect data about visitors, yes: that processing needs consent before it starts, and withdrawing must be as easy as accepting. A site with no such tools needs no banner.

What are the penalties?

Up to 250 crore rupees for failing to take reasonable security safeguards, up to 200 crore for failing to report a breach or for breaches of the rules on children, and up to 50 crore for other violations.

Can you fix the issues for us?

Yes. We build the privacy notice, consent banner, consent records and rights request process into your site, and hand it over with the rest of the code.

Web Vogue Technologies — web design and software development company in Hyderabad.

Hyderabad, India · +91 70135 68928