# EasyDP — DPDP Compliance Platform for Indian Businesses

EasyDP helps Indian businesses comply with the Digital Personal Data Protection (DPDP) Act 2023 and DPDP Rules 2025. It is designed for small and medium businesses — including Instagram sellers, WhatsApp sellers, Shopify store owners, auto dealers, schools, and coaching centres — who collect personal data of Indian customers.

## What EasyDP does

- Captures legally valid consent from customers in their preferred Indian language (22 Eighth Schedule languages via Bhashini API)
- Manages Data Subject Requests (DSR) — access, correction, deletion — within the 72-hour response window mandated by the Act
- Sends DPDP-compliant consent notices over WhatsApp, SMS, and email
- Provides a 72-hour breach notification workflow to the Data Protection Board (DPB)
- Generates audit logs for every consent event
- Handles parental consent for data subjects under 18 years (DPDP Rule 10)
- Integrates with Shopify, Instagram DMs, WhatsApp Business API, Facebook, and custom webhooks

## Who needs DPDP compliance

The DPDP Act applies to any entity that collects, stores, or processes personal data of individuals in India — regardless of company size or revenue. This includes:

- E-commerce businesses and Shopify stores
- Social commerce sellers (Instagram, WhatsApp, Facebook)
- Auto dealerships that collect Aadhaar, PAN, and finance records
- Schools and coaching centres that hold student and parent data
- Any business with a customer database, CRM, or contact list

## Key facts about the DPDP Act 2023

- Full name: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023)
- Enacted: August 2023; came into force: November 13, 2025
- Enforcement deadline: May 13, 2027
- Maximum penalty for data breach: ₹250 Crore
- Maximum penalty for children's data violations: ₹200 Crore
- Breach notification window: 72 hours
- Regulator: Data Protection Board of India (DPB)
- Children's data: Verified parental consent required for anyone under 18 (Rule 10)

## Pricing (as of 2025)

- Starter: ₹999/month — up to 1,000 data principals, consent management, DSR portal
- Growth: ₹2,499/month — up to 10,000 data principals, WhatsApp bot, multilingual notices
- Enterprise: Custom pricing for large volumes and API access

## Contact and links

- Website: https://easydp.in
- DPDP Compliance Checker (free): https://easydp.in/checker/
- Who needs DPDP: https://easydp.in/docs/who-needs-dpdp/
- Shopify guide: https://easydp.in/docs/shopify/
- Instagram guide: https://easydp.in/docs/instagram/
- WhatsApp guide: https://easydp.in/docs/whatsapp/
- Facebook guide: https://easydp.in/docs/facebook/

## Frequently Asked Questions

**Is DPDP compliance mandatory for small businesses?**
Yes. The DPDP Act applies to any business that collects personal data of individuals in India — regardless of size. Even a kirana store that enters customer phone numbers into WhatsApp or Excel is covered under Section 3(a)(ii).

**What is the DPDP compliance deadline?**
The DPDP Act came into force on November 13, 2025. The hard enforcement deadline for most obligations is May 13, 2027.

**Does DPDP apply to WhatsApp and Instagram sellers?**
Yes. Sellers who collect names, addresses, and phone numbers through DMs are directly covered under Section 3(a)(i).

**How long does EasyDP take to set up?**
Most businesses are live in under 30 minutes. Shopify merchants are live in under 10 minutes.

**Do customers need to download anything?**
No. Customers click a short link and complete consent in their browser — no app, no account required.