Blog & updates
DPDP, in plain English.
News, deadline reminders and guides for Indian website owners working through the DPDP Act.
Showing 1–6 of 30
Page 1 of 5
- Guide
DPDP vs GDPR: what Indian startups actually need to know
Comparing India's DPDP Act 2023 with Europe's GDPR — what is shared, where they diverge, and where one programme can serve both. A practical map for Indian startups serving Indian and EU users.
Read article
- Update
DPDP Rules 2025 explained: 7 key changes for Indian websites
MeitY notified the DPDP Rules on 13–14 November 2025 with an 18-month phased rollout. Here are the seven changes that matter most for Indian website owners — consent UX, breach SLAs, children's data, cross-border, Significant Data Fiduciary, grievance redressal, and the May 2027 deadline.
Read article
- Guide
What is a Data Fiduciary under India's DPDP Act — and are you one?
If your website collects any personal data from Indian users, you are almost certainly a Data Fiduciary under the DPDP Act 2023. Here is what that means, the seven obligations that follow, and the three tests that tell you for sure.
Read article
- Guide
A free, full DPDP audit with admin credentials — how the checkDPDP free-audit actually works
Most DPDP audits in India cost ₹50,000–₹3 lakh. The checkDPDP free audit is free, end-to-end, and you get personal admin-dashboard credentials by email within 1 business day. Here is exactly what happens between 'send query' and 'walk through the report'.
Read article
- Guide
Meet Suraksha — checkDPDP's DPDP Act AI assistant (now with a full-page chat)
Suraksha is checkDPDP's India-trained DPDP Act AI assistant. Ask anything about the Act 2023 or Rules 2025 — Section 5 notices, consent banners, breach reporting, your rights — and get Section-grade answers in plain English. Now upgraded with a full-page ChatGPT-style UI at /suraksha.
Read article
- Guide
How to add a Grievance Officer to your website under the DPDP Act (Section 8(10))
Section 8(10) requires every Data Fiduciary to publish a Grievance Officer. Most Indian SMB sites either skip this entirely or hide a generic support@ inbox. Here is the exact appointment, publication and SLA pattern that survives a Data Protection Board check.
Read article