DPDP Act 2023 · DPDP Rules 2025
Is your website ready for the DPDP Act?
Enter a website address. We visit it the way a first-time visitor would and check consent, cookies, the privacy notice, forms, grievance contact and security. The check takes about a minute.
No sign-up, no email. Your full report opens right here when the check finishes.
What this check does, and what it does not do
- It loads up to 6 public pages in a normal browser, as a first-time visitor, and once more after clicking Reject on the cookie banner.
- It records which trackers and cookies load, reads the privacy notice, and looks at forms, grievance contact, HTTPS and security headers.
- It does not log in, submit forms, or run any vulnerability, penetration or security test.
- Results are an automated preliminary review, not legal advice and not a certificate of compliance.
What we check
Trackers before consent
Analytics, ad pixels and session recorders that run before the visitor agrees.
Sec 6(1)Consent banner quality
Equal Accept and Reject buttons, no pre-ticked boxes, and whether Reject really stops tracking.
Sec 6(1), 6(4)Privacy notice
Itemised data and purposes, withdrawal, rights, Data Protection Board, Indian languages.
Sec 5, Rule 3Forms
Contact, enquiry and sign-up forms: notice link, consent checkbox, encrypted submission.
Sec 5, 6, 8(5)Rights & grievance
Published grievance officer contact and a way to request access, correction and erasure.
Sec 8(9), 11–14Security basics
HTTPS, HSTS, certificate, security headers, mixed content, exposed versions.
Sec 8(5), Rule 6