212 days until DPDP's core obligations apply on 13 May 2027Check your readiness free
DPDP
Free self-assessment · E-commerce

DPDP Readiness Check for E-commerce

Forty questions on the DPDP Act, 2023 and DPDP Rules, 2025, with notes on what each one means for an online store or marketplace. Your score and top gaps update as you go. No sign-up needed to see your score. Takes about ten minutes.

Core obligations apply from13 May 2027212 days left

What is different for e-commerce and online retail

  • Every sign-up, checkout and marketing pixel collects personal data, so notices and consent have to be built into your site and app.
  • Platforms with 2 crore or more registered users in India must erase data of users inactive for three years, with 48 hours' notice first (Rule 8).
  • Payment gateways, courier partners, marketing tools and sellers all receive customer data.

More in our DPDP for e-commerce guide. Other versions: General · Hospitals · Schools and colleges · Banks and NBFCs

Get your gap report

Leave your details and we will send a written gap report with a remediation plan for your organisation. You can also copy the summary below right now.

This self-check gives operational guidance only and is not legal advice. Section and Rule references point to the DPDP Act, 2023 and DPDP Rules, 2025; confirm details against the official gazette text. Data protection contact: info@corelinksys.com. Read our privacy notice. Want an expert to review your answers? See the Readiness Starter.