What is the deadline for DPDP Act enforcement in India?

Hard enforcement for the Digital Personal Data Protection (DPDP) Act begins on May 13, 2027. The transition window is currently active.

What are the penalties under the DPDP Act?

Penalties range from ₹50 Crores for general violations to ₹250 Crores for failure to take reasonable security safeguards.

How much does DPDP compliance cost?

Market rates for comprehensive DPDP compliance range from ₹3-7 Lakhs for SMEs to ₹15+ Lakhs for enterprises. This includes awareness training, data audit, DPA deep-dive sessions, consent manager setup, and ongoing DPO support.

Does DPDP apply to small businesses?

Yes. The DPDP Act makes no distinction based on turnover. Even if you have 100 customers, if you collect digital personal data, you are a Data Fiduciary and must comply.

What is included in a DPDP compliance workshop?

A DPDP readiness workshop typically includes: understanding the DPDP Act, mapping your tech stack, reviewing data processor agreements, checking consent flows, and creating a clear action plan.

After The Calculator

DPDP Services by Sushant Pasumarty

Four structured engagements — from a quick data mapping to full end-to-end consulting. Each builds on the previous, so you can start where it makes sense and upgrade as you go.

Services

Four Ways to Work With Us

Each tier builds on the previous. Start where it makes sense, upgrade when you need more.

Data Mapping

1-2 weeks

₹1.5L – ₹3L

Map every personal data flow in your organization
Identify who collects data, where it goes, which vendors touch it
Catalog all systems: CRM, HRMS, analytics, payments, marketing tools
Document data retention and access controls

You walk away with: Complete data flow map covering all personal data touchpoints.

DPDP Readiness Audit

2-4 weeks

₹2L – ₹6L

Everything in Data Mapping, plus:
Gap analysis: consent, DPAs, grievance, breach, deletion
Vendor compliance assessment for your top processors
Risk severity ratings for each gap

You walk away with: Gap report with severity ratings and risk exposure assessment.

DPDP Workshop

4-6 weeks

₹5L – ₹10L

Everything in Readiness Audit, plus:
Prioritized recommendations with implementation guidance
90-day roadmap with quarterly milestones
DPA templates for your vendor agreements
Consent flow redesign recommendations

You walk away with: Actionable 90-day roadmap, DPA templates, and consent flow designs.

Full DPDP Consulting

3-6 months

₹7L – ₹12L

Everything in DPDP Workshop, plus:
Hands-on implementation support alongside your team
DPO training and interim DPO services
Vendor negotiation and DPA execution support
Final DPDP Readiness Opinion letter

You walk away with: Fully implemented DPDP compliance framework with readiness certification.

Not sure which tier fits?

Use the free cost calculator to understand your scope, then book a 30-minute call with Sushant to decide which service makes sense for your company.

Your Workshop Leaders

Built By Practitioners, Not Consultants

We've BUILT the systems (not just consulted). We understand tech AND legal (rare combination). We give you clarity, not just theory.

Sushant Pasumarty

Founder & Lead Consultant

Sushant leads strategy and client engagements at MBS. He has built and sold products in identity verification, cybersecurity, and e-commerce at IDfy, CyberArk, and Cyware. He conducted due diligence on billion-dollar investments for a top global growth equity firm. Master's from IE Business School, Computer Science from BITS Pilani.

Ayush Sahay

Advocate & Legal Advisor | Almost 10 Years Experience

Ayush is a seasoned legal professional with almost a decade of experience in data protection, intellectual property, and litigation. Worked with top-tier firms like Shardul Amarchand Mangaldas, EY, and Anand & Anand. He is the lead advisor for DPDP legal structures.

Why We're Different:

We've Built Systems

Not just consulted on them

Tech + Legal

Rare combination of expertise

Clarity, Not Just Theory

Deep understanding of key documents

Questions?

Frequently Asked Questions

They sell pipes, we fix plumbing. A ₹3,000/month tool caps their liability at ₹25L. You still face ₹50-250 Cr fines. We transfer knowledge and give you outcomes, not just software.

Yes. The question is whether your team has the time and confidence to map data, vendors, notices, consent, deletion, grievance, and breach process correctly. We help you get clarity faster.

90% of companies who think they're compliant have missing DPAs, bundled consent, or no deletion mechanism. We audit YOUR actual setup and find the gaps you don't know about.

You leave with a current-state picture, priority gaps, a rough budget range, and a practical action plan. Simple, usable, and tied to your business.

The first ROI is avoiding blind spend. You understand what needs legal work, what needs product work, and what can wait.

Yes, but one business decision-maker should attend. DPDP is not only a legal problem or a tech problem. It changes product, operations, vendors, and customer communication.

Still have questions?

Book a Readiness Call