Regulatory Standards · India
Digital Personal Data Protection Act
India DPDP readiness, built on evidence.
India's DPDP Act and its Rules require reasonable security safeguards and prompt breach reporting. Astragar maps safeguards to the data and systems they protect, ahead of phased enforcement.
Register interest in India DPDPComing to Astragar GRC
₹250 cr
Maximum penalty for failing to take reasonable security safeguards
72h
Detailed breach report to the Data Protection Board under the Rules
May 2027
Core obligations, including security and breach reporting, apply
What India DPDP requires
The obligations, in brief.
Consent & notice
Clear notice and consent, or another legitimate use, for processing.
Security safeguards
Reasonable safeguards to prevent personal data breaches.
Breach notification
Inform the Data Protection Board and affected individuals.
Significant Data Fiduciaries
Additional duties including DPIAs, audits and a DPO.
How Astragar helps
From checklist to measurable risk.
01
Requirement → control mapping
Map every India DPDP requirement to controls, systems, assets and owners.
02
Evidence, continuously
Collect and maintain evidence, with sign-off from contributor to IT auditor, CISO and executive office.
03
Exposure behind the gaps
See which vulnerabilities and sensitive data put India DPDP controls at risk.
04
Risk in financial terms
Prioritise remediation by business and financial impact, not checklist order.
Penalties are tied to security failures. Astragar shows which safeguard gaps carry the most exposure.
Sign-off workflow
Evidence Contributor
→IT Auditor
→CISO
→Executive Office
Find the data. Test the controls. Reduce the risk.
India DPDP mapping is coming to Astragar GRC. Talk to us about early access and how your existing evidence already applies.
Talk to usAstragar supports compliance programmes with technical evidence and risk analysis. It does not provide legal advice or issue certifications.
See your cyber risk in $ terms, not CVSS scores.
