DPDP Act 2023 · DPDP Rules 2025

DPDP compliance, run like a system, not a spreadsheet.

AuditHUB 360 is India's DPDP compliance platform for businesses. Collect valid consent, issue notices, answer data principal requests and keep an audit trail the Data Protection Board will accept, from one dashboard.

Made for Indian lawPer-employee pricingWebsite consent API

Core modules

The DPDP clock is already running

The Digital Personal Data Protection Rules, 2025 were notified on 13 November 2025 with phased commencement. Penalties under the Act go up to ₹250 crore per breach of security safeguards.

13 Nov 2025

Act and Rules notified

Data Protection Board of India constituted. Definitions and Board provisions in force.

13 Nov 2026

Consent Managers

Registration and obligations of Consent Managers commence. The consent ecosystem goes live.

13 May 2027

Full obligations

Notice, consent, security safeguards, breach intimation, retention and data principal rights bind every Data Fiduciary.

MeitY has consulted publicly on compressing this timeline. Build the system now, not in the last quarter.

One platform for every DPDP obligation

Built around the actual architecture of the Act and the Rules, so each screen maps to a duty you owe.

Consent links that stand up

Send consent and data collection links to customers, employees and vendors. Every consent is stored with purpose, timestamp and notice version, and can be withdrawn as easily as it was given.

Itemised privacy notices

Plain-language notices that itemise the data and the purpose, versioned so you can prove which notice each person saw.

Rights requests on a clock

Access, correction, erasure, nomination and grievance requests tracked from receipt to closure, with response timelines visible to the team.

Approval-gated downloads

No one exports personal data without an approval. Super admin oversight across collectors, branches and departments.

Audit trail by default

Who collected, who viewed, who approved, who deleted. A defensible record if the Board ever asks.

API and white-label

Plug consent capture into your website and app forms through the API, or run the whole platform under your own brand.

Live in three steps

Map your data

We identify what personal data you collect, from whom, for what purpose and where it sits.

Switch on the platform

Notices, consent flows, roles and approval rules configured for your business and employees.

Stay audit-ready

Dashboards, rights requests and logs run continuously, so compliance is a state, not a project.

Built for businesses that handle Indian personal data

Manufacturing & MSMEsRetail & D2C brandsFood & QSR chainsReal estate developersHospitals & clinicsSchools & ed-techNBFCs & fintechStaffing & HR firmsHotels & hospitalityPharma

DPDP compliance software for businesses across India

Fully online onboarding and support from Gurugram, for Data Fiduciaries in every state and union territory.

Delhi NCRGurugramNoidaMumbaiPuneBengaluruHyderabadChennaiKolkataAhmedabadJaipurChandigarhLudhianaLucknowIndoreKochi

Simple pricing. Pay per employee.

No heavy licence fee. Your subscription scales with your team, with the website API and white-label available as add-ons. Tell us your headcount and we will quote the same day.

PlatformConsent, notices, rights, audit trailPer employee
Website Consent APIFor forms, apps and landing pagesAdd-on
White-labelYour brand, your domainOn request

DPDP compliance, answered

What is AuditHUB 360?

AuditHUB 360 is an Indian software platform that helps businesses comply with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. It handles consent collection, privacy notices, data principal rights requests, approval-gated access to personal data and a complete audit trail, with an API for website forms.

When do DPDP obligations apply to my business?

The DPDP Rules, 2025 were notified on 13 November 2025. Consent Manager provisions commence on 13 November 2026, and the core Data Fiduciary obligations on notice, consent, security safeguards, breach intimation and data principal rights commence on 13 May 2027. MeitY has consulted on shortening this window, so early readiness is the safer course.

What is the penalty for non-compliance?

The Schedule to the DPDP Act, 2023 provides penalties of up to ₹250 crore for failure to take reasonable security safeguards, up to ₹200 crore for failure to notify a personal data breach, and other penalties for breach of remaining obligations, imposed by the Data Protection Board of India.

Does the DPDP Act apply to employee data?

Yes. Personal data of employees, job applicants and vendors is digital personal data under the Act. Employment is a recognised legitimate use for certain processing, but notice, security, retention and rights obligations still apply, which is why AuditHUB 360 is priced per employee.

Can AuditHUB 360 collect consent from my website?

Yes. The API and consent links plug into website and app forms, so every consent is captured with purpose, timestamp and notice version and can be withdrawn as easily as it was given.

How do I get a demo?

Fill the enquiry form below, call +91 83607 29497, or message us on WhatsApp. Demos are online and take about 30 minutes.

See AuditHUB 360 on your own data flows.

A 30 minute demo, mapped to your business. No obligation.

+91 83607 29497Call for enquiry WhatsApp usQuick response on WhatsApp

Enquiry form

Call Now Enquire