What Is This Module For?
The Privacy Policy Analyser reviews your existing privacy policy against the requirements of the DPDP Act 2023 and DPDP Rules 2025 and identifies gaps that need to be addressed before publication.
Which Law Requires This?
- DPDP Rules 2025, Rule 3 — Privacy notices must be in plain language, available in English and scheduled Indian languages, and must specify data categories, purpose, retention periods, and withdrawal mechanisms.
Step-by-Step Guide
- Go to Policy Analyser in the sidebar.
- Upload your current privacy policy (PDF or paste text).
- The AI analyser checks your policy against 25 DPDP compliance criteria.
- Review the analysis report — each criterion is marked as Present, Partially Present, or Missing.
- Use the suggested language to fill gaps.
- Re-upload the updated policy to confirm compliance.
Common Mistakes to Avoid
- Using a GDPR-compliant policy and assuming it meets DPDP requirements — The DPDP Act has different requirements. A GDPR policy is a starting point, not a complete solution.
- Not providing the policy in regional languages — Rule 3(2) requires the notice in any scheduled language a user requests.
Frequently Asked Questions
Q: Does passing the analyser mean our policy is legally compliant?
A: The analyser checks structural completeness, not legal interpretation. Have your final policy reviewed by a legal professional before publishing.