Your DPDP compliance partner
Get your organisation DPDP-ready before 14 May 2027.
From the first gap check to an ongoing privacy office, Corelinksys DPDP works with your team at every step of compliance with the Digital Personal Data Protection Act, 2023.
Time left to comply
14 May 2027 · core obligations apply
Notice, verifiable consent, security safeguards, 72-hour breach reporting, retention and children's data (Rules 3, 5–16).
Where things stand
The Rules arrive in three phases. The last one is the one that matters.
Rules notified
Data Protection Board of India set up.
Consent Managers
Registration opens for platforms that manage consent on people's behalf.
Every data fiduciary
Notice, consent, safeguards, breach reporting, retention and children's data obligations apply.
The DPDP journey
Four stages. Start free, bring us in where you need us.
Most organisations need help in one or two stages, not all four. Each stage has something you can use today at no cost, and a service if you want us to do it with you.
Assess
Find out where personal data lives and how far you are from the Act.
Plan
Turn the gaps into a prioritised plan your leadership can approve.
Implement
Notices, consent, rights handling, retention, breach response and training.
Sustain
Keep compliant as systems, vendors and people change.
Ways to work with us
Start small or hand us the whole programme.
Readiness Starter
Your readiness check reviewed by an expert, a written gap report and a 60-minute call.
See what's includedGap assessment + implementation
We map your data, close the gaps and leave you with policies, processes and trained staff.
See the programmeDPO-as-a-service
A named privacy lead for your organisation, without a full-time hire.
How it worksWho we work with
Any organisation that handles personal data.
The Act applies to every business, institution and non-profit that processes digital personal data in India. We tailor the work to your sector, size and systems.
Why Corelinksys DPDP
Practical compliance, run by people who have done it.
25 years in IT, CISA-certified
Deep systems experience and audit discipline, applied to how personal data really moves through your organisation.
Operational, not just paperwork
We change forms, systems and processes, so compliance works on the ground and not only in a policy file.
Works with your counsel
We handle the operational work and coordinate with your legal advisers where a legal opinion is needed.
DPDP in brief
Common questions about the DPDP Act
Short answers. For detail, read our DPDP Act and Rules guide.
What is the DPDP Act?
The Digital Personal Data Protection Act, 2023 is India's law on how organisations collect, use, store and share digital personal data. The DPDP Rules, 2025 set out how it works in practice.
When do DPDP obligations apply?
The core obligations for every organisation, including notice, consent, security safeguards, breach reporting, retention and children's data, apply from 14 May 2027. Consent Manager registration applies from 14 November 2026.
Who must comply with DPDP?
Every organisation that processes digital personal data in India, whatever its size or sector, including companies, hospitals, schools, colleges, banks, startups and non-profits.
What is the penalty for not complying with DPDP?
Up to ₹250 crore for failing to take reasonable security safeguards, and up to ₹200 crore for failing to report a breach or for breaching children's data obligations.
How can I check if my organisation is DPDP-ready?
Take the free Corelinksys DPDP Readiness Check: 40 questions across 8 areas, about 10 minutes, with your score and top gaps sent by email.
Every week counts before May 2027.
A 30-minute consultation is enough to tell you where you stand and what to do first.