A practical review of your data practices
Know where your data practices need work.
Your policy says one thing. Can your team show what happens in practice? Answer ten sets of questions, note the supporting records and leave with a report of what to check next.
Your answers stay in this browser. No account or submission. This is an educational self-review, not a website scan or compliance verdict.

YOUR NEXT STEP
What will you get from the review?
A report that separates your answers, the records you can point to and the gaps still to investigate. “I don’t know” is a valid answer.
Review your practices
Answer questions about collection, use, sharing and deletion.
Start your review 02See an example report
Read a report made with fictional answers before you start.
Open the example 03How the review works
Understand how answers and supporting records appear in the report.
Read the methodTHE REVIEW MAP
What the review covers
The questions cover how your team collects, uses, shares and protects personal data. You can leave an answer unknown and return to it later.
- 01Map the dataEvidence topic
- 02Show the noticeEvidence topic
- 03Exercise rightsEvidence topic
- 04Define deletionEvidence topic
- 05Evidence safeguardsEvidence topic
- 06Trace processorsEvidence topic
- 07Check child flowsEvidence topic
- 08Sample proofEvidence topic
- 09Rehearse responseContext only
- 10Record relevanceContext only
HOW TO READ AN ANSWER
Put the answer beside the evidence.
A policy may say one thing while a system does another. Keep the supporting document beside your answer so the next reviewer knows what to check.
- AnswerWhat the team says it knows.
- Document or recordWhat supports the answer.
- SourceWhich dated source/status note gives context.
- UncertaintyWhat still needs human checking.
YOUR INFORMATION
Your review stays in the browser.
The tool works with the answers you provide. It does not visit your website or connect to your business systems. Do not enter personal or confidential details.
- Your answers
- Review in this browser
- Example export
- Human review
- No website scanning
THREE CALM STEPS
Start without needing perfect answers.
- 01
Set your scope
Name the team’s context without entering personal or confidential details.
- 02
Answer what you know
Choose known, evidenced, or “I don’t know.” You can flag missing information for follow-up.
- 03
Use the evidence map
See what was stated, what evidence is present, and what to verify next.
DATED SOURCE CONTEXT
Check when each requirement takes effect.
This website distinguishes enacted text, notified commencement and future provisions. It does not decide applicability.
DPDP Act, 2023 · commencement notifications · DPDP Rules, 2025 · corrigendum
Open source register →