SRIDA-DPDP-RTP-001 · Version 1.1 · 708 pages · by Rajendra Bodda, CISO
Digital Personal Data Protection Act, 2023 & DPDP Rules, 2025 — Requirements, Implementation Guidance & Audit Testing Procedures
India's data protection law as requirements and controls you can audit.
708
pages
103
controls
25
requirement topics
Why this manual matters
With the DPDP Rules notified, Indian organisations now have a fixed runway to comply. The difficulty is not reading the Act — it is turning sections and rules into owned controls, evidence and an audit trail that will stand up to the Data Protection Board.
This manual organises the Act and Rules into 25 requirement topics and 103 controls, each with implementation guidance, audit testing procedures and evidence. It separates what the law requires, what is a regulatory power or guidance, and what is good practice — and it handles the open legal questions neutrally instead of guessing.
It is the reference behind Srida IT's DPDPA implementation and audit work.
What’s inside
25 requirement topics
Every obligation of the Act and Rules mapped into topics R-01 to R-25 with interpretation and tests.
103 controls
Each with statement class, implementation steps, evidence and evaluation criteria.
Open legal questions
A register of unresolved interpretation points with neutral readings and an interim approach — never prejudged.
Programme and audit
Implementation roadmap, audit method, templates and the penalty schedule.
Who it is for
- Data Protection Officers and privacy leads
- Compliance, legal and risk teams preparing for the DPDP Rules
- Internal auditors and privacy assessors
- Consultants delivering DPDPA readiness
Preview before you buy
The free sample has 12 pages: the cover and document control pages, the opening of the contents, the start of Chapter 1 and one complete requirement entry with its testing procedures.
Open the sample PDF in a new tab →How you receive it
- Pay ₹970 by UPI QR and enter your UPI reference at checkout.
- We verify the payment against our bank record, usually within one business day.
- You receive an email with a secure download link (valid 30 days, up to 5 downloads; you can request a fresh link any time).
- Your PDF is stamped with your name, email and a unique licence code on every page.
- For 12 months, every new version of this manual is emailed to you automatically.
Please note
Independent Srida IT guidance, not legal advice. Where the Act or Rules are open to interpretation, the manual sets out the readings rather than deciding them; take legal advice on your own position.
Purchases are subject to the Terms and Conditions.