Personal data protection compliance (DPDP Act, 2023): documents, fees and how to apply online and offline

Apps and platforms that collect personal data must give clear consent notices, use data only for the stated purpose, protect it, report breaches and delete it when no longer needed; children's data needs verifiable parental consent. Most duties under the DPDP Rules, 2025 apply from about May 2027.

Issued byData Protection Board of India (Ministry of Electronics and IT)

Government feeNone

Usual timeBefore launch

ValidityOngoing

Apply on the official portalApplying is free of agents; pay only the government fee shown on the portal.

Open the portal

How to apply online, step by step

Map what personal data you collect and why.
Publish a consent notice and privacy policy; add consent and withdrawal options.
Name a contact for data questions and set up a way to handle requests and complaints.
Put security safeguards and a breach response plan in place.

How to apply offline (in person)

No licence; keep records of consent and processing.

Questions people ask

How much does Personal data protection compliance (DPDP Act, 2023) cost?

None

How long does Personal data protection compliance (DPDP Act, 2023) take?

Before launch

Who issues Personal data protection compliance (DPDP Act, 2023)?

Data Protection Board of India (Ministry of Electronics and IT)

Can I apply for Personal data protection compliance (DPDP Act, 2023) without an agent?

Yes. Every step above can be done by the founder on the official portal or at the office; agents and consultants are optional.

Official source: https://www.meity.gov.in/. Rules and fees change; the official page is the authority. Checked October 2026.

Find out everything your startup needs

The Startup Evaluator lists the registrations and licences for your sector, State and team size, in the order to get them, with costs, schemes and a three-year cash plan. All licence guides.