Twelve quick questions. Choose Yes, Partly or No. You will get a score and a list of modules to revisit. This DPDPA 2023 course page explains dpdpa readiness questionnaire in plain language.
Advertisement
Your organisation (dpdpa readiness questionnaire)
Do you know what personal data you collect and where it is stored?
Does every form or app screen show a clear notice before collecting data?
Is consent specific to each purpose and recorded with date and notice version?
Can users withdraw consent as easily as they gave it?
Do you have a process to handle access, correction, erasure and grievance requests?
Do you use encryption, access control and keep logs for at least one year?
Do you have a written breach plan, including the 72-hour report to the Board?
Do vendor contracts include security, breach reporting and deletion terms?
Have you published a contact point and grievance process for privacy queries?
Do you know where your data is sent outside India?
If you handle data of anyone under 18, do you take verifiable parental consent?
Do you have a retention schedule and a deletion process?
Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.