A structured self-assessment against the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, weighted for healthcare. You will see where you stand across ten compliance domains; our team prepares the detailed remediation analysis separately.
We need a work email so the assessment reaches the right person at your organisation.
This sets which obligations apply to you and how the domains are weighted.
Which of these apply? Tick all that are true.
Calculated on the mandatory duties alone. Treat it as an upper bound — the supporting controls have not been assessed yet, and they are where most organisations lose ground.
A further set of questions covers the machinery underneath the duties — vendor governance, children’s data, impact assessments, retention automation and digital-health alignment. About six minutes, and it is what turns a provisional figure into one you could put in front of your board.
Your score is ready. We ask for a direct number so a specialist can talk you through what sits behind it — the detailed analysis is prepared by our team, not generated on this page.
This self-assessment is an indicative readiness indicator, not a legal opinion or an audit. The score reflects what you have reported; an assured assessment requires evidence review. Nothing here should be relied on as advice on your obligations under the DPDP Act, 2023 or the DPDP Rules, 2025.
This preview cannot reach an external endpoint, so nothing was transmitted. On the hosted page this payload goes to Inovatree. It is shown here only so the flow can be checked.