212 days until DPDP's core obligations apply on 13 May 2027Check your readiness free
DPDP
Free self-assessment · Banks and NBFCs

DPDP Readiness Check for Banks, NBFCs and Fintechs

Forty questions on the DPDP Act, 2023 and DPDP Rules, 2025, with notes on what each one means for a bank, NBFC or fintech. Your score and top gaps update as you go. No sign-up needed to see your score. Takes about ten minutes.

Core obligations apply from13 May 2027212 days left

What is different for banks, NBFCs and fintechs

  • You already follow RBI rules on KYC, outsourcing and IT. DPDP adds duties on notices, consent, customer rights and erasure.
  • One incident may need reports to the Data Protection Board, CERT-In (within 6 hours) and RBI.
  • Recovery agents, DSAs, KYC vendors and payment partners all handle your customers' data, and you stay answerable for what they do on your behalf.

More in our DPDP for NBFCs and fintech guide. Other versions: General · Hospitals · Schools and colleges · E-commerce

Get your gap report

Leave your details and we will send a written gap report with a remediation plan for your organisation. You can also copy the summary below right now.

This self-check gives operational guidance only and is not legal advice. Section and Rule references point to the DPDP Act, 2023 and DPDP Rules, 2025; confirm details against the official gazette text. Data protection contact: info@corelinksys.com. Read our privacy notice. Want an expert to review your answers? See the Readiness Starter.