score-v1.1
Scoring rubric
Weights express evidence-review priority, not a legal conclusion.
| Category | Weight | Classification | Reference |
|---|---|---|---|
| Governance & inventory | 15 | Implementation indicator | DPDP Act sections 4 and 8(4) |
| Notice & choice | 20 | Implementation indicator | DPDP Act sections 5–6; DPDP Rules, 2025 rule 3 |
| Rights & grievance | 15 | Implementation indicator | DPDP Act sections 8(10) and 11–13 |
| Retention & deletion | 10 | Implementation indicator | DPDP Act section 8(7); DPDP Rules, 2025 rule 8 |
| Security & breach readiness | 20 | Implementation indicator | DPDP Act sections 8(5)–(6); DPDP Rules, 2025 rules 6–7 |
| Processors & transfers | 10 | Fact-dependent legal question | DPDP Act sections 8(2) and 16 |
| Children & guardian handling | 5 | Fact-dependent legal question | DPDP Act section 9; DPDP Rules, 2025 rules 10–12 |
| Assurance & evidence quality | 5 | Best practice | DPDP Act section 10 |
| Breach response context | Unweighted | Implementation indicator | DPDP Act section 8(6); DPDP Rules, 2025 rule 7 |
| SDF relevance context | Unweighted | Fact-dependent legal question | DPDP Act section 10 |
Interpretation limits
A high score can still have low coverage. A low-confidence self-attestation does not become independent assurance. A topic marked unknown is a visible investigation task. Applicability depends on the organisation, processing activity, commencement status and other law.