EfHR

Free assessment

DPDP Compliance Assessment

Forty checks across eight areas of India's Digital Personal Data Protection Act, written for the HR context — employee data, candidate records, background checks and vendors. Every gap comes back with the specific requirement behind it, so you know what to fix and why it matters.

Check your compliance

Mark anything that genuinely does not apply as "not applicable" — it is excluded from your score rather than counted against you.

The eight areas

Consent & Notice

Standalone privacy notices, itemised purposes, and genuine opt-in consent.

Security Safeguards

Technical and organisational measures protecting personal data.

Breach Management

Incident response, DPB notification, and telling affected people.

Data Principal Rights

Access, correction, erasure and grievance redressal.

Retention & Deletion

Holding data no longer than the purpose requires.

Vendor & Processor Management

Contracts and oversight of processors handling your data.

Governance & Accountability

Ownership, records, and demonstrable compliance.

Cross-border & Special Cases

Transfers, children’s data and other higher-duty situations.

This is a self-assessment, not legal advice

It reflects the Act and its Rules as published, and is designed to help HR teams find and prioritise gaps. It does not substitute for advice from your legal or privacy counsel.

Start the assessment