Your digital life.
Your data.
Your control.
Understand how your information is exposed, identify digital risks, and take control of your privacy with one intelligent platform.
STATUTORY MANDATE
DPDP Act 2023
ENFORCEMENT CAP
Up to ₹250 Crore
DATA RETENTION
Zero Persistence
Time left until India's DPDP full-compliance deadline.
MeitY notified the DPDP Rules on 13–14 November 2025 with an 18-month phased rollout. Every Indian website needs to be defensible by 13 May 2027. Start with a free scan today.
———
Days
——
Hours
——
Minutes
——
Seconds
Target: 13 May 2027 · 00:00 IST
Counting in your browser
Statutory Framework
DPDP Act 2023 · Rules 2025 · Sections 5–16
Zero Data Storage
Diagnostic probes run server-side · zero site data persisted
Indian Jurisdiction
India-built · Grievance Officer published per Section 8(10)
Built around India's Digital Privacy Ecosystem
Explore important Indian institutions, regulatory resources, and official cybersecurity channels that help people and businesses navigate digital privacy and security.
Ministry of Electronics & Information Technology
The central government ministry responsible for IT policy, notifications under the Digital Personal Data Protection Act 2023, and the DPDP Rules 2025 rollout.
Indian Computer Emergency Response Team
National nodal agency designated under IT Act Section 70B for cybersecurity vulnerability response, threat advisories, and mandatory 6-hour incident reporting.
Data Protection Board of India
The statutory authority established under the DPDP Act 2023 to inquire into personal data breaches, direct urgent remedial measures, and impose Section 33 financial penalties.
National Cyber Crime Reporting Portal
Citizen helpline (1930) and reporting framework operated by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs for financial fraud and online harms.
Unique Identification Authority of India
Statutory authority established under the Aadhaar Act 2016 administering biometric privacy, zero-knowledge e-KYC protocols, and secure offline identity verification standards.
Reserve Bank of India
Apex monetary authority issuing mandatory sectoral directives on payment system data localization within India, digital lending compliance, and financial entity cyber resilience.
Independent Directory & Regulatory Resource Index: CheckDPDP is an independent private technology platform and is not affiliated with, endorsed by, certified by, or in an official partnership with the Government of India, MeitY, the Data Protection Board of India, or any government regulator.
All institutional names, emblems, logos, and acronyms referenced above belong strictly to their respective statutory authorities. Links to official government websites are provided solely for public reference, regulatory awareness, and statutory education.
SafeCheck™ Compliance Scanner
A free, automated 40-point technical audit for any Indian website. We test cookies, privacy notices, Grievance Officer disclosures, and security headers against the DPDP Act 2023 and Rules 2025.
lifestyle-retail.in
Sector: Consumer E-Commerce & RetailDPDP Aligned (Remediation Needed)
Deploy CheckDPDP Zero-Execution Banner to block third-party trackers until positive opt-in is recorded.
Open Cookie Banner Builder→Meta Ads Pixel Triggered Pre-Consent
Script executes on initial DOM mount prior to cookie banner consent.
Grievance Officer Email Present in Footer
dpo@lifestyle-retail.in identified with explicit 30-day turnaround commitment.
Notice Missing Vernacular Hindi Translation
Rule 3 requires scheduled language support; only English privacy notice provided.
Consent Withdrawal Mechanism Accessible
Preferences drawer provides instant opt-out for non-essential cookies.
Know what happens to your data.
Under India's DPDP Act, you are a Data Principal. You have the legal right to know which companies hold your information, withdraw consent, demand deletion, and appeal directly to the Data Protection Board.
You have 3 active consent records registered across connected digital services. 0 unaddressed breach notices reported to the Data Protection Board in your monitored accounts.
Recent Consent Records & Revocation
Section 6(4) MandateZomato Media Pvt Ltd
Consent granted: Delivery address & GPS location
PhonePe Lending Services
Consent granted: Credit bureau inquiry
Urban Company Platform
Consent granted: Contact phone & service history
Need your records deleted?
Generate an official Section 12 erasure request sent to the verified Grievance Officer.
Right to Access Summary of Personal Data
Demand a transparent summary of what personal data any company is processing and third parties with whom it was shared.
Right to Correction & Data Erasure
Require the Data Fiduciary to erase outdated, inaccurate, or no longer necessary personal identifiers within statutory deadlines.
Find Grievance Officer & Redressal
Search verified contact email and physical address for over 200+ Indian apps, banks, telecom, and consumer portals.
Direct Complaint to Data Protection Board
If the company fails to respond satisfactorily within 30 days, file an official grievance escalation with the Board.
Privacy operations for modern businesses.
The DPDP Act establishes direct statutory liability up to ₹250 crore for failure of reasonable security safeguards. CheckDPDP operationalizes your technical compliance across all six core mandates.
Multilingual Notice & Consent Architecture
Generate and embed notices in English, Hindi, and 22 Eighth Schedule languages with itemized data categories and explicit purpose specifications.
Automated Language Manifest
22 Indian scheduled languages dynamically rendered based on user browser locale
Free DPDP Enterprise Audit — we send admin credentials to your inbox.
Submit your domain name. A checkDPDP compliance specialist conducts a full 40-point technical audit and emails personal admin credentials to review every Pass, Warn, and Fail across all 10 categories.
Intelligence & Enforcement Dispatch
Authoritative updates on Data Protection Board orders, MeitY notifications, penalty rulings, and legal analyses.
Editorial Perspectives · The CheckDPDP Thesis
Privacy should not require a technical background.
India's Digital Personal Data Protection Act represents a historic shift in how 1.4 billion citizens interact with digital products. Yet for founders, engineering teams, and everyday citizens, compliance has been weaponized by traditional advisory firms into dense legalese and expensive retainers.
A 70-page legal opinion in a PDF does not tell a software developer which cookie script is executing before the user accepts, nor does it tell an everyday user how to force a broker to delete their phone number.
CheckDPDP was founded on a simple principle: compliance must be executable code, not speculative paperwork. We translate every mandate—from Section 5 notice requirements in 22 scheduled languages to Section 8 reasonable security safeguards and Section 33 penalty exposures—into deterministic diagnostics.
“If data protection cannot be understood in sixty seconds, it is not protecting anyone.”
Two Models of Indian Privacy Compliance
Why modern technology companies build on CheckDPDP rather than static legal retainers.
- —₹50,000–₹3,00,000 upfront fees for one-off manual gap analyses.
- —6-week turnaround delivering a static Word document that goes stale the next sprint.
- —Zero code inspection: cannot verify cookie execution timing or header flags.
- —Leaves developers to guess how to implement Section 6(4) revocation in JavaScript.
- ✓100% Free diagnostic scanner with zero signup or credit card required.
- ✓Instant 60-second automated audits mapped to DPDP Act 2023 & Rules 2025.
- ✓Real DOM telemetry: checks actual cookie flags, CSP headers, and network requests.
- ✓Provides ready-to-deploy code snippets, privacy notices, and consent management tools.
Company Privacy Directory & Regulatory Forum
Verified Section 8(10) Grievance Officer records for major Indian enterprises and peer-reviewed regulatory guidance.
Verified Grievance Officers
Published pursuant to Section 8(10) of the DPDP Act 2023
Amazon India
E-commerce & retailAmazon Seller Services Private Limited
BigBasket
E-commerce & retailSupermarket Grocery Supplies Pvt Ltd
BookMyShow
Entertainment & OTTBig Tree Entertainment Private Limited
IRCTC
Utilities & governmentIndian Railway Catering & Tourism Corp.
Uber India
Transport & ride-hailingUber India Systems Private Limited
Practitioner & Regulatory Forum
Peer-reviewed implementation guidance & legal research
Verification Architecture for Section 9 Parental Consent in Consumer Apps
Analysis of tokenized age-verification alternatives: evaluating DigiLocker zero-knowledge proofs vs SMS OTP guardians for edtech, gaming, and youth content platforms.
Operational Protocol for 72-Hour Breach Disclosures to the Board
Establishing a dual-phase notification protocol: phase-1 initial alert within 72 hours of identification, followed by forensic impact assessment within 14 days.
Standard Contractual Clauses for Cloud Processors Outside India
Recommended contractual addenda for AWS, Google Cloud, and Azure deployments ensuring cross-border transfer alignment with Section 16 non-restricted territory mandates.
Compliance Masterclasses & Legal Guides
Editorial research papers, implementation blueprints, and statutory interpretations written specifically for tech founders, CISOs, and legal teams.
The Complete Technical & Legal Guide to the DPDP Act 2023 & Rules 2025
Exhaustive section-by-section breakdown of all 44 sections, the 5 statutory penalty bands in the Schedule, and the 18-month MeitY rollout timeline. Written for technology founders, security architects, and corporate counsel.
- 01.Section 5: Multilingual notice standards in 22 scheduled languages
- 02.Section 6: Zero-execution affirmative consent architecture
- 03.Section 8(6): 72-hour Data Protection Board breach disclosures
- 04.Section 8(10): Resident Grievance Officer SLAs & registry
- 05.Section 9: Verifiable parental consent and child profiling bans
- 06.Section 16: Cross-border territorial restrictions and cloud hosting
Digital privacy, engineered for India.
Whether you are a citizen exercising your statutory rights or a data fiduciary securing your digital operations, CheckDPDP provides the deterministic tooling you need.
Take control of your personal data
Search verified Grievance Officers for over 200 Indian companies, generate formal Section 12 erasure notices, and understand your statutory rights under the DPDP Act 2023.
Audit your digital compliance in 60s
Evaluate your website against 40 technical checkpoints: cookie consent timing, tracker disclosure, security headers, and vernacular notices. Zero code installation required.