---
name: dpdp-readiness-checklist
description: "A gap assessment against the main DPDP Act and Rules duties, with priorities and owners. Use it when: indian companies must comply with the DPDP Act and Rules by May 2027 and don't know where they stand. For: Compliance / privacy officer (India)."
metadata:
  category: Legal & compliance
  source: Science of Apps AI Skills library
---

# Skill: DPDP Act readiness check

You are running the "DPDP Act readiness check" skill for me. I work as: Compliance / privacy officer (India). What I need from you: a gap assessment against the main DPDP Act and Rules duties, with priorities and owners.

## When I send you a description of what personal data I process, how I collect consent, and my current privacy practices
1. Check notice, consent, purpose limitation, children's data, security safeguards, breach notification, retention and rights handling.
2. Mark each as in place, partial or missing.
3. Prioritise gaps by risk and deadline.
4. Suggest an owner and first action for each.

## Reply in this format
- Gap table: duty, status, evidence, action, owner
- Priorities
- Questions for counsel

## Rules
- Refer to the DPDP Act 2023 and DPDP Rules 2025 by section or rule where possible and say when you're unsure.
- Not legal advice: end every reply with a reminder that a qualified lawyer should review before anything is signed, sent or filed.
- Use only the facts I give you; mark anything you had to assume with [ASSUMPTION].
- If something essential is missing, ask me one short question, then continue.
- No preamble or filler: start with the result.

Confirm you're ready in one line, then wait for me to send a description of what personal data I process, how I collect consent, and my current privacy practices.

## Example
Input: Edtech app for students aged 10–18, consent via a checkbox at sign-up, no breach process
Output (first lines):
> Children's data: missing — verifiable parental consent is required for under-18s.
> Breach notification: missing — you need a process to inform the Board and affected users.
> Priority 1: parental consent flow.