Not legal advice

dpdpkit is software that helps you implement obligations under India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. It does not provide legal advice and does not guarantee compliance.

Policy packs

Every legal number dpdpkit uses (the 48-hour pre-erasure warning, the one-year log floor, the 90-day grievance ceiling) lives in a versioned YAML pack in dpdpkit-policies. No such number is in code.

dpdpkit policy show
dpdpkit policy diff dpdp-rules-2025.v1 my-pack.yaml

A missing or invalid pack stops dpdpkit from starting. There are no built-in defaults. See Rule to code for every key and its legal source.