DPDP Readiness Assessment Tool

Turn your privacy posture into a clear DPDP readiness assessment.

This guided Lexemer workflow screens the practical pressure points that usually matter first under the Digital Personal Data Protection Act, 2023: notice, consent, children's data, vendor sharing, governance, security, and user rights.

India focused 5-step review Score + roadmap Draft documents
What this tool checks
NoticePrivacy notice quality, plain language, and withdrawal flow
MinorsParental consent and prohibited child profiling risks
ControlRetention, breach response, officer visibility, and safeguards
OutputDPDP score, priority fixes, and reusable draft documents
DPDP readiness assessment workflow
Step 1 of 5
1
2
3
4
5
Organisation
Data Collected
Consent & Notice
Governance
Rights

Your Organisation

We tailor the assessment to your entity type and sector. Takes about 5 minutes.

Certain sectors face heightened DPDP scrutiny due to the sensitivity of data processed.
Practical notes How to read the DPDP readiness score Read notes

The score is a working privacy checklist, not a legal sign-off. Use it to find gaps in notice, consent, rights handling, vendor control, breach readiness and internal ownership.

What the tool reviews

The assessment follows the practical DPDP workflow most Indian businesses and NGOs need before publishing policies or making external compliance claims.

  • Privacy notice, consent capture, withdrawal and purpose limitation.
  • Data principal rights, grievance contact and response ownership.
  • Vendor access, retention, breach escalation and staff handling controls.

Where to be careful

A high score can still miss operational facts if the answers are too optimistic or the data map is incomplete.

  • Children data, health data, finance data and high-volume consumer data need deeper review.
  • Cross-border transfers and processor contracts should be checked against live business practice.
  • Policy templates should be matched to the actual product, website and support flow.

Best next step

Use the result to create an internal remediation list before approving privacy notices, consent text or vendor onboarding language.

  • Assign one owner for each red or amber item.
  • Keep evidence of notices, logs, consent records and grievance handling.
  • Re-run the assessment after major product, vendor or data-flow changes.

Note: This is a DPDP readiness screen, not a privacy sign-off. Review children data, sensitive records, vendors, transfers and high-volume processing before using the output for policies or external claims.