DPDP learning for Indian SMBs
Understand practical DPDP touchpoints through official sources and a free, guided, no-score review. Map one everyday information workflow and take useful questions back to your team.
Free browser review · No score · No sign-in
The free review uses fixed-choice questions across common SMB settings. Your answers stay in this browser while you complete and view the result; nothing is saved or submitted during that part. You can print the full map without signing in or giving contact details.
Choose a business area, answer broad prompts about people, information, tools and follow-up, then view a summary and the full question map. Your answers stay in this browser while you work. The result is not a score, legal opinion or decision about whether a law applies.
Open the reviewEmail delivery is not live. If enabled, the report request will appear after your result and ask for your name, verified email, SMB segment, approximate size band and State/UT. Your details and selected answers will be used only to send the copy you request; this is not marketing. Any optional human follow-up will use a separate request with its own consent and will not include your answers.
Future paid editions may be SaaS-hosted or installed on a customer network. Neither edition is offered here; there is no product sign-up, runtime or payment, and pricing remains on hold.
Use broad or fictional examples. Do not enter customer names, identity details, credentials, health information, student records or incident narratives.
The review covers classes, clinics, services, retail and more, with a general route for other small businesses. These examples are prompts, not a legal classification or applicability determination.
Playschools, childcare, day-care, tuition, exam preparation, coaching and vocational classes. Work involving children needs careful, context-specific review.
Gyms, yoga, aerobics, dance, music, sports and hobby studios working with memberships, attendance, classes or media.
Driving schools and passport, visa, licence or other document-assistance services handling enquiries, appointments or submitted records.
Clinics, diagnostics, dental, physiotherapy and counselling services reviewing appointment, communication and service workflows.
Local shops, online sellers, food businesses and delivery services handling orders, bookings, customer support or loyalty information.
Property brokers and managers, accountants, tax and document practitioners, HR, payroll, small employers and other local businesses.
Small hotels, guest houses, travel and tour operators, event or wedding planners handling reservations, traveller or attendee details, outside booking services and vendors.
Salons, spas, home-care providers, repair and cleaning teams working with appointments, customer and worker details, home addresses, access notes or service photos.
Use the current official publications and notices for authoritative text. Pramana supports learning and work organization; it does not replace qualified advice.
Read the Act hosted by the Ministry of Electronics and Information Technology.
Open the official ActThe Act notification sets later provisions at one year and eighteen months after Gazette publication. The Gazette masthead is dated 13 November 2025; MeitY's document index records 14 November 2025. The official materials reviewed do not clarify the one-day difference, so this page does not state one calculated calendar deadline. These periods do not determine which duties apply to a particular business workflow.
The 13 November 2025 G.S.R. 846(E) notification brought Rules 1, 2 and 17–21 into force on publication. It sets Rule 4 for one year after publication in the Official Gazette, and Rules 3, 5–16, 22 and 23 for eighteen months after publication in the Official Gazette. G.S.R. 892(E) corrects the commencement wording and other text. The Gazette masthead and MeitY's index record dates one day apart; the official materials reviewed do not clarify the difference.
G.S.R. 843(E) schedules Act Sections 6(9) and 27(1)(d) to commence one year after Gazette publication. They concern Consent Manager registration with the Data Protection Board and the Board’s inquiry power over breaches of registration conditions. G.S.R. 846(E) places Rule 4 and its First Schedule, which set Consent Manager registration conditions and obligations, on the same relative timetable. This is a Consent Manager regime; it does not require every SMB to register as one. As of 21 October 2026, the one-year phase is not yet in force. Because the official publication-date records differ by one day, this page does not state a single calendar start date.
G.S.R. 844(E) establishes the Data Protection Board of India under Section 18, with its head office in the National Capital Region. G.S.R. 845(E) notifies a four-member Board under Section 19(1). These notices describe the Board’s institutional setup; they do not determine which duties apply to an SMB.
S.O. 5458(E) is dated 5 October 2026. The Gazette PDF bears an issue date of 6 October and Gazette ID CG-DL-E-07102026-276885; it was digitally signed on 7 October. The Order states that it takes effect on publication. It corrects Section 9(1) wording concerning children and people with disabilities who have a lawful guardian, and replaces “audit” with “data audit” in Section 10(2)(c)(ii). Section 10 concerns Significant Data Fiduciaries; this wording does not create a blanket audit duty for every SMB. It does not change the commencement schedule: Sections 7–10 remain in the notified 18-month group.
Open S.O. 5458(E)