Disclaimer
What the material on this site is, and what it is not.
Guidance, not legal advice
Everything published on this site — articles, checklists, assessments, reports and document templates — is professional guidance material on the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. It is not legal advice and does not create an advocate–client relationship. For advice on your specific facts, consult a qualified legal practitioner.
No claim of compliance
No score, report, badge or document produced here says that an organisation is compliant with the Act. Findings are assessed against named provisions. Whether an organisation meets its obligations depends on facts beyond what any tool can read, and on decisions only that organisation can make.
What automated checks can and cannot see
Tools that read a public web page see only what is published at the moment of the reading. A control drawn after a page loads, a document behind a login, or a practice that exists only inside an organisation cannot be observed. Those checks are reported as not visible, never as a pass — and never as a failure we could not evidence.
Templates need adapting
Templates and toolkit documents are starting points shaped by the answers you give. They must be reviewed against your actual processing activities, contracts and systems before they are adopted or published.
External links and third parties
This site links to legislation, regulator material and other organisations' pages. Data Niyam does not control that content and is not responsible for it.
Accuracy over time
The DPDP framework and its rules continue to develop. Pages carry the position as we understood it when written, and are revised as the framework moves. If something here reads as out of date, tell us at experts@dataniyam.in and we will correct it.