Superintelligence Buildathon · 14–15 Nov · leave with an app, site, game, AI tool & more Enrol now
Buildathons Workshops AI Track Legal Track Programs Services Labs Knowledge About Contact
Enrol · Superintelligence Buildathon Enrol · Legal AI Buildathon
Knowledge materials · PDF kit

DPDP Act Compliance Starter Kit

Everything an Indian business needs to get ready for the Digital Personal Data Protection Act: the law explained, the documents drafted, the work planned.

EdgeBefore DPDP Act Compliance Starter Kit cover
Get the kit · ₹9,999 What’s inside

The DPDP Rules were published on 13 November 2025. Most obligations on businesses start eighteen months later, around 13 May 2027: itemised privacy notices, consent that can be withdrawn as easily as it was given, security safeguards, breach notices, retention and erasure, rights requests and grievance handling. Penalties under the Act go up to ₹250 crore.

The DPDP Act Compliance Starter Kit turns the Act and the Rules into a working programme. Every legal statement is cited to the official text, and every obligation is labelled with the date it applies.

What’s inside

Four files. One DPDP programme.

The DPDP Compliance Guide: 79 pages

  • What applies when: the three commencement dates and what each one switches on
  • Scope: when the Act applies, Data Fiduciary or Data Processor, and the two exclusions in section 3(c)
  • Building a data inventory, step by step, with an interview method for each team
  • Lawful grounds: consent and the section 7 legitimate uses, including employment and "voluntarily provided" data
  • Notices under Rule 3, consent design, withdrawal, notice to existing users and Consent Managers
  • Children’s data and verifiable parental consent; guardians of persons with disability
  • Processors and contracts; security safeguards under Rule 6; how breach duties connect with CERT-In
  • Retention, erasure and the one-year log rule; Data Principal rights, nomination and grievances
  • Significant Data Fiduciaries, cross-border transfers and sector notes
  • A 90-day readiness plan, common mistakes, an FAQ, a glossary and an index

Templates (33 pages, 15 templates)

Layered privacy notice, just-in-time consent texts by channel, notice to existing users, consent register, data inventory with interview guide and processor register, processor contract clauses, rights request form, access response, correction and erasure responses, acknowledgement and refusal letters, nomination form, 48-hour pre-erasure notice, retention schedule, employee and candidate notice, and a DPIA.

Checklists (13 pages)

Readiness by obligation, processor onboarding gate, rights request handling, and a launch review for new products and features.

Quick card (1 page)

Dates, scope, lawful grounds, notice contents, core duties, rights, penalties and the 90-day plan on one landscape page.

All files are print-quality PDFs, current to 23 October 2026, delivered as one ZIP.

Who it’s for

Built for the people doing the work.

Founders and directors, compliance officers and company secretaries, privacy leads and DPOs, in-house counsel, product and engineering heads, HR leaders, and the consultants who support small and mid-sized Indian businesses.

Why teams use it
  • Cited to the source. The Act, the Rules, the commencement notification and the government’s own statements. Where something could not be verified, the kit says so.
  • Clear about dates. Obligations are labelled In force or From ~13 May 2027, and the timeline chapter explains the 13 November 2026 Consent Manager stage.
  • Ready to use. Templates you can adapt, not essays about templates. Each one points back to the provision it implements.
  • Joined up. Breach response is handled by cross-reference to the EdgeBefore Breach Response Kit, so the two never contradict each other.
Price

One price. Everything included.

DPDP Starter Kit

₹9,999

  • The complete kit: guide, templates, checklists and quick card (PDF, delivered as one ZIP).
  • Instant download as a single ZIP, right on the page after payment

Final price in INR. Secure payment by Cashfree. Instant download: the page you land on right after payment has your download button.

Questions

Before you buy.

Is this legal advice?
No. The kit is general information to help you plan your DPDP programme. It is not legal advice and does not replace advice from a qualified advocate on your facts. No regulatory or other outcome is guaranteed.
Is the DPDP Act already in force?
In part. The Rules were published on 13 November 2025 with the Board provisions in force immediately. Consent Manager registration follows one year later, and most Data Fiduciary obligations eighteen months after publication, around 13 May 2027. The kit labels every item.
Do we need this if we are a small business?
The Act applies to digital personal data whatever the size of the business. Some duties, such as erasure after three years of inactivity, apply only to large platforms, and the guide flags these.
Does it cover breach notification?
It explains the DPDP breach duties and how they sit alongside CERT-In’s six-hour rule, and refers to the Breach Response Kit for the full incident playbook.
How current is it?
Current to 23 October 2026. Laws change, so always check the official text before you rely on it.
What format are the files?
PDF: guide, templates, checklists and quick card, delivered as a single ZIP.
Can we share it across our organisation?
The kit is licensed for internal use by the purchasing organisation; templates may be adapted for that organisation’s own use.

EdgeBefore · General information, not legal advice. No outcome is guaranteed.

DPDP Act Compliance Starter Kit

Final prices · Secure payment · No payment details are collected on this site