The DPDP Act is no longer optional
The Digital Personal Data Protection Act, 2023 became operational when the DPDP Rules, 2025 were notified on 13 November 2025. Notice, consent, data-principal rights, breach reporting and security safeguards become mandatory from 13 May 2027.
If you hold customer data digitally, you are in scope
Hospitals, Clinics & Labs
Patient records, HIS access and WhatsApp sharing are common gap areas.
E-commerce & D2C
Customer and payment data at scale may trigger stricter obligations.
SaaS, IT & Startups
Your B2B customers are already asking for DPDP compliance proof.
Fintech, NBFC & Insurance
Highest penalty exposure — financial and KYC data under the Act.
Real Estate & Property
Tenant, buyer and broker data usually has no formal governance.
Schools & EdTech
Children's data carries the strictest consent requirements in the Act.
HR-Tech & Staffing
Candidate and background-check data crosses multiple systems.
Hospitality & Travel
Guest ID, passport and payment data shared with third-party vendors.
Any business with a CRM
If you collect customer data digitally, this applies to you.
Six pillars, assessed and then built
We score you against six pillars, then produce only the artefacts that close your specific gaps. Every document is AI-drafted against a maintained clause library and reviewed by a human before it reaches you.
- Governance — Named accountability, board-level policy, documented decision trail.
- Data Mapping — What you collect, where it sits, who touches it, how long you keep it.
- Consent & Transparency — Notice and consent artefacts that match what you actually do.
- Technology Security — Access control, encryption posture, breach detection and response.
- People & Processes — Training, joiner-mover-leaver hygiene, no informal WhatsApp data flows.
- Third-Party Governance — Vendor DPAs, processor obligations, sub-processor visibility.
1. Free readiness score
Three-minute self-assessment, instant six-pillar gap report.
2. Guided digital intake
Tell us how data flows through your business. No site visit, no jargon.
3. Drafted, reviewed, delivered
AI-drafted documents, human-reviewed, delivered in your MyPropey account.
Transparent pricing. Govt Taxes added at checkout.
Readiness Score
3-minute self-assessment with an instant six-pillar gap report.
- DPDP Readiness Score
- Instant gap report
- Recommended next step
- No card required
Foundation Pack
The documentation floor every Data Fiduciary needs.
- Privacy policy drafted for your business
- DPDP notice + consent framework
- Data-mapping template
- Six-pillar gap report
- Human review before delivery
Compliance Builder
Everything in Foundation, plus the operating machinery.
- Everything in Foundation
- DSAR workflow templates
- Breach-response runbook (72-hr standard)
- Retention & deletion schedule
- Vendor DPA template pack
- Staff training deck
DPO-Lite Retainer (first month)
Ongoing cover, billed monthly. First month payable now.
- Everything in Builder
- Quarterly review call
- Regulatory update alerts
- On-demand template edits
- SDF readiness add-on available
Vertical accelerator packs (healthcare, e-commerce, edtech, real estate) can be added to any package — mention it in your intake notes.
Nine questions. Instant six-pillar gap report.
Straight answers
Does the DPDP Act apply to my small business?
Yes. Any organisation that collects personal data from Indian residents — even through a single web form or a WhatsApp Business chat — is a Data Fiduciary under the Act. Size does not exempt you, though it affects how heavy your obligations are.
What is the actual deadline?
The DPDP Rules were notified on 13 November 2025 with an 18-month phase-in. Full compliance — notice, consent, data-principal rights, breach reporting and security safeguards — is expected from 13 May 2027. Building the documentation now is far cheaper than retrofitting later.
Do you visit our office?
No. The entire engagement is digital: guided intake, AI-assisted drafting, human review, and delivery through your MyPropey account. No site audits, no travel cost.
Is this legal advice?
No. MyPropey provides compliance documentation and process tooling. Where an independent legal opinion is required, we route you to empanelled independent advocates.
How is this cheaper than a consulting firm?
Because the drafting is automated against a maintained clause library and only the review is human. You pay for the review, not for a team of associates re-typing the same policy.
Are taxes included?
Prices shown are the base fee. Govt Taxes at 18% are added at checkout and the total is what Razorpay charges.