With about seven months left before most obligations under the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025 take effect, many companies are still missing basic disclosures on their own websites, according to a new white paper by Bengaluru based compliance platform ComplyDP.
\n\nThe study, The State of DPDP Readiness in India , checked the public websites of 1,680 companies against disclosure checks drawn from the Act and the Rules. It covers what any visitor can see: privacy notices, consent banners, grievance contacts and rights information.
\n\n73.7% had no consent banner detected. Without one, non essential tracking on a website runs without the free, specific and informed consent the Act requires.
\n\n63.3% showed no parental consent mechanism. Children's data obligations under Section 9 carry a maximum penalty of Rs 200 crore, among the highest in the Act.
\n\n33.2% offered no language option for their privacy notice, although the Act lets users read notices in English or any language in the Eighth Schedule to the Constitution.
\n\n19.8% had no privacy notice link at all. Most companies have a notice, but many still miss DPDP specific elements. 17.2% did not disclose the right to nominate another person to…
Original source: https://www.timesnownews.com/business-economy
