Free tool
Penalty exposure and readiness score
Boards ask two questions about the DPDP Act: what could this cost us, and how ready are we. This tool answers both from what you enter. It shows the heads of the Schedule that apply to an organisation like yours with their ceilings as published, and scores the controls behind each one.
Free tool6 min
- Answers
- Describe your organisation, your data and the controls that run today. See which heads of the DPDP Schedule apply, their ceilings in rupees, a readiness score and the gaps to close first.
- Based on
- The DPDP Act and Rules as notified
- Privacy
- Calculated in your browser. Nothing is sent unless you choose to send it
- Step 1Organisation
- Step 2Data
- Step 3Controls
- Step 4Result
Your organisation
Used to decide which heads of the Schedule apply. Nothing is sent anywhere.
How this works
What the tool is based on
The Schedule, quoted as published
The ceilings come from the Schedule to the DPDP Act, 2023: up to 250 crore rupees for security safeguards, 200 crore for breach notice and for children's data, 150 crore for Significant Data Fiduciary duties and 50 crore for any other provision.
Ceilings, never a predicted fine
The Data Protection Board decides the amount for each instance after an inquiry, weighing the nature, gravity and duration of the breach and what was done about it. The tool shows which heads apply and how covered you are.
Controls drive the score
Each control you answer maps to the head it protects, so the gaps come back ordered by the ceiling behind them, each with a next step.
The breach clock
The clock starts when you become aware
Tell the Board and the people affected without delay. Where the CERT-In directions apply, report within 6 hours. Send the Board a detailed report within 72 hours, unless it allows longer. Not legal advice.
More tools
Other free tools
Tool
Breach clock
Enter when you became aware of a breach. See the 72 hour deadline for the detailed report to the Board, the CERT-In 6 hour window, and what to do in each.
Learn moreTool
Privacy notice checker
Tick what your privacy notice contains against what the Act and Rules ask. Get the gaps, each with the fix and the provision behind it.
Learn moreTool
Request deadline planner
Enter the date a request arrived and its type. See your own targets and the 90 day outer limit for grievances under Rule 14.
Learn moreTool
DPDP readiness score
Nine statements about how your DPDP work runs today. Get a score, a band and the gaps to look at first.
Learn moreSee it with your data
Show us where your personal data lives. We will show you TrustOS running on it.
A 30 minute walkthrough on Google Meet with someone who knows the Act and the product. You leave with a view of your first phase, the owners and the effort.
Or get a rollout proposal in two minutes- Step 1A 30 minute demo on Google MeetWith someone who knows the Act and the product.
- Step 2Your systems and purposesWe walk one product's personal data through TrustOS.
- Step 3A first phase you can planModules, owners and effort, written down for you to keep.