Every DPDP compliance conversation starts the same way. Someone asks, "Which section covers cross-border transfer?" or "What's the cap for a breach notification failure?" and we all open the Gazette PDF again. We got tired of opening the Gazette PDF. So we built a site that puts the whole Act and the whole Rules on one navigable surface. It went live today at dpdpa.dcomply.in, and it is free forever.
What's on the hub
Thirty pages across six categories, everything cross-linked so you never have to search twice for the same section.
The Act, section by section. All 44 sections of the DPDP Act 2023 in one navigable page at /act/. Section headings, plain-English answers, the primary Gazette citation on every claim.
The Rules, rule by rule. All 23 Rules and 7 Schedules of DPDP Rules 2025 (G.S.R. 846(E), notified 13 November 2025) at /rules/. The phased enforcement timeline is spelled out on the page so you know which Rules are live today and which activate on 14 May 2027.
The four penalty caps. The Schedule is cleaned up as a reference card at /schedule/penalties/. Rs. 250 crore, Rs. 200 crore, Rs. 150 crore, Rs. 50 crore, and the Rs. 10,000 Data Principal cap. Which section triggers which cap, and how the Board weighs the amount within it.
Section deep pages for the six most-asked provisions: Section 6 consent, Section 8 obligations, Section 9 children, Section 10 SDF, Sections 12 to 14 rights, and Section 16 cross-border. Each opens with a three-sentence answer for LLM and voice-search citability.
Sector guides for BFSI, Healthcare, E-commerce, and MSME at /sectors/. Each guide reads DPDP through the lens of what that sector's regulator already demands, so a bank does not read the same page a hospital reads.
Three free interactive tools at /tools/. A Fine Calculator that estimates your exposure across the four caps. A Gap Analyzer that scores your current state against DPDP obligations. A Notice Generator that drafts a Rule 3-compliant privacy notice. All three run in the browser; no data leaves your device.
The DPDP vs GDPR crosswalk we get asked for most
If your company runs both DPDP in India and GDPR in the EU, the side-by-side comparison at /compare/dpdp-vs-gdpr/ answers the questions we keep getting on client calls. Extraterritorial scope, legal bases, penalty design, cross-border transfer (whitelist vs negative-list), DPO trigger. It also compares DPDP against CCPA and Brazil's LGPD for teams working across those regimes.
What we deliberately did NOT do
A reference site earns trust by what it refuses to say.
No legal advice. Every page is a reference to the primary source, not a substitute for a lawyer's opinion on your specific facts. When you need advisory work, hire a qualified data protection lawyer.
No unverified claims. Every date, penalty, section reference, and Board status on the hub is checked against MeitY, the Gazette, or the primary text.
No fabricated regulator names. The Data Protection Board Chair is not appointed as of September 2026. The /board/ page says exactly that. We will update the page when the Chair is named, not before.
No signup, no paywall, no dark patterns. No email capture on the hub itself. No cookies unless you accept them. No tracking pixels beyond Google Analytics, with Consent Mode set to default denied. We eat our own DPDP dogfood.
Who this is for
If you are a DPO in your first six months, the section deep pages will save you a Bar Council textbook trip. If you are a founder trying to understand whether DPDP applies to your five-person startup, the Who-is-covered interactive answers it in four clicks. If you are a lawyer briefing a client, the FAQ has 40 answers you can quote with attribution. If you are a compliance vendor writing product copy, the citations are cleaner than pulling from ChatGPT.
Where the hub fits in the dcomply universe
Three properties, one team.
dcomply.in is our compliance SaaS platform. It runs the day-to-day DPDP workflows, 27 modules and counting, for organizations that would rather ship than write policies.
academy.dcomply.in is our training and certification arm. Fifteen professional certifications; DPDP Act 2023 is free and available today.
dpdpa.dcomply.in is the neutral reference layer under both. Anyone can use it; no dcomply account needed. It exists to make sure the DPDP conversation in India has a shared factual baseline, not fifteen wrong Slack copy-pastes.
A short favor
If a section deep page or one of the tools helps you, share it. Google discovers new subdomains partly by watching who links to them, and a hub like this is only useful if the people who need it can find it. Bookmark the URL, drop it in a Slack channel, or link to a specific page in your next LinkedIn post about DPDP. That is the only ask.