The DPDP Rules are phasing in through 2026 and 2027. Organisational compliance is mandatory by 13 May 2027.

What this means for you

Home / Readiness check

Ten questions. An honest answer about where you stand.

This takes about three minutes. It will not tell you whether you are compliant, because no ten questions can do that. It will tell you which gaps are worth worrying about first, which is the useful part.

Runs entirely in your browser
Nothing is sent to us
About three minutes

Answer honestly rather than optimistically. A low score here is normal and it is not a judgement. Almost every business we assess starts somewhere in the lower half, including ones that have already spent money on this.

Question 1 of 10

Can you list every system in the business that holds personal data?

Question 2 of 10

What state is your privacy notice in?

Question 3 of 10

How do you capture consent where you rely on it?

Question 4 of 10

If someone asked how you got their phone number, could you answer?

Question 5 of 10

Do your vendor contracts say anything about personal data?

Question 6 of 10

What happens to system access when someone leaves?

Question 7 of 10

Is anything in the business ever actually deleted?

Question 8 of 10

If a customer asked you to delete their data tomorrow, what happens?

Question 9 of 10

Do you have a plan for a lost laptop or a compromised account?

Question 10 of 10

Do you hold data about anyone under eighteen?

Answer every question to get a result. Nothing you select leaves this page, and we cannot see it.

0 of 100

Result

Where the gaps are

What we would do first

What this is not

An honest note about self assessments.

Ten questions cannot assess a business. They cannot see your admin consoles, they do not know which tools your team adopted last quarter, and they take your word for everything.

What they can do is tell you whether the basics exist. If you scored badly on inventory, notices and retention, no amount of further reading changes what needs to happen next. If you scored well, the remaining risk is usually in places a questionnaire cannot reach, which is exactly where a real assessment starts.

We built this to be useful on its own. Your result is not emailed to us, there is no gate, and you are not on a list because you used it.

Questions10
TimeAbout 3 minutes
Where it runsYour browser
Data sent to usNone
Email requiredNo
CostNothing