The Skope blog

DPDP, without the legalese.

What India's data law actually asks of you, what it fines, and how to get compliant before the deadlines. Written for founders, not counsel.

Explainer

What is the DPDP Act? India's data law, explained

India's first real data protection law, in plain English. Who it covers, what it asks, and why a two-person startup is on the hook the same as a bank.

12 Jun 2026 · 7 min read

Checklist

The DPDP compliance checklist for small teams (2026)

Twelve items between you and DPDP compliance. Work through them in order, tick them off, keep the proof. Print the page or save it as a PDF for your team.

12 Jun 2026 · 8 min read

Guide

DPDP compliance in 5 steps with Skope

Zero to compliant in five steps: paste one tag, scan your forms, edit the AI-drafted notice, switch on autoblock, and let the receipts pile up.

12 Jun 2026 · 6 min read

Penalties

DPDP Act penalties: every fine in the Schedule, explained

₹250 crore is the headline, but the Schedule has seven rows and the Board can stack them. What each fine attaches to, and what actually protects you.

12 Jun 2026 · 7 min read

Timeline

DPDP compliance timeline: every date that matters

Three dates run the show: 14 November 2025, 14 November 2026, and 13 May 2027. What switched on at each, and how to pace the work backwards from the last one.

12 Jun 2026 · 6 min read

Comparison

DPDP compliance tools in 2026: what to actually look for

Four ways to get DPDP compliant: retrofit a GDPR CMP, hire consultants, build it yourself, or use an India-first kit. Where each one wins, and the test that sorts them.

12 Jun 2026 · 7 min read

Comparison

DPDPA vs GDPR: why your cookie banner is not enough

Calling DPDPA "India's GDPR" is how teams end up non-compliant with a banner already on their site. Seven differences, and what each one breaks.

12 Jun 2026 · 7 min read

Explainer

Does the DPDP Act apply to small businesses? Yes. Here's what that means.

No revenue floor, no headcount floor. If you collect a name and an email from anyone in India, you are a Data Fiduciary. The carve-outs are narrower than founders hope.

12 Jun 2026 · 6 min read

Guide

Consent under the DPDP Act: notice, purpose, withdrawal

Section 6 packs five tests into one sentence, and most banners fail at least two. What valid consent looks like, what the notice must say, and how withdrawal has to work.

12 Jun 2026 · 7 min read

Explainer

Consent Managers under the DPDP Rules, explained

India invented a new species of intermediary: one dashboard where a person manages consent across every service they use. Registration opens 14 November 2026. Here is how it will work.

12 Jun 2026 · 6 min read