What Is This Module For?
The DPDP Gap Assessment module provides a structured assessment of your organisation's compliance with all 15 key obligations under the DPDP Act 2023, calculates your penalty exposure, and identifies remediation priorities.
Which Law Requires This?
The assessment covers the entire DPDP Act 2023 framework including Sections 5–16 on Data Fiduciary obligations, and the DPDP Rules 2025. Penalty amounts are drawn from the DPDP Act Schedule.
Step-by-Step Guide
- Go to Gap Assessment in the sidebar.
- Click "New Assessment" — optionally link it to a client (for B2B consulting use).
- Answer 15 yes/no questions covering consent, DSR, security, breach notification, and more.
- The system identifies gaps and maps each to the relevant DPDP penalty clause.
- Review your compliance score and total penalty exposure in rupees.
- Download the full assessment report as a PDF for board presentations and compliance audits.
- Use the gap list to prioritise remediation actions.
Common Mistakes to Avoid
- Answering based on intent, not reality — Answer based on what you actually have in place today, not what you plan to do.
- Not reassessing after remediation — Run a new assessment after you have addressed gaps to track your improvement.
Frequently Asked Questions
Q: How often should I run a gap assessment?
A: At least annually, and after any significant change to your data processing activities or after a regulatory update.
Q: Can the assessment report be shared with auditors?
A: Yes. The PDF report is designed for external sharing and includes your assessment date, score, and gap analysis.