Gap analysis
The gap analysis measures an organisation against India’s Digital Personal Data Protection (DPDP) Act and Rules, with 35 questions written for its sector. You get a score, the gaps found, the risk each gap creates and the corrective action for each.
Sectors
Banks, e-commerce, EdTech, higher education, hospitals, hotels, manufacturing, pharmaceuticals and schools. Choose the sector on the gap analysis page.
The free version
Anyone can take the gap analysis without signing in. Nothing you answer is stored: the report is worked out on the spot and shown to you. Use Print / Save PDF to keep it.
In a client workspace
For a client in one of these sectors, choose Gap Analysis in the left menu. The answers are saved with the client (encrypted for real clients), and you can update them as things improve. The client’s report shows the latest score, and each recommended action links to the vDPO tool that helps fix it, such as the data inventory or the breach register.
Answering
| Answer | Meaning | Points |
|---|---|---|
| Yes | Fully implemented | 2 |
| Partially | Implemented, but gaps remain | 1 |
| No | Not implemented | 0 |
| Not Applicable | Does not apply | Left out of the score |
A question left unanswered counts as No and is flagged in the report, so the score is never higher than the answers support.
The report
- Score: points earned out of the maximum for the questions that apply, overall and for each of the eight sections.
- Gaps: every No and Partially answer, with the risk it creates.
- Actions: the corrective action for each gap.
From gaps to risks
In a client workspace, every No or Partially answer becomes a finding in the risk register, where you can group findings into risks and assign owners and due dates.