Tooluck logoTooluck
SKILL.md

dpdpa

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks about the DPDPA, DPDP Act, DPDP Rules 2025, India data privacy law, Data Fiduciary obligations, Data Principal rights, Significant Data Fiduciary, Data Protection Board of India, consent under DPDPA, notice requirements, breach notification India, children's data India, cross-border data transfer India, India privacy compliance, DPDPA gap analysis, DPDPA vs GDPR, or any obligation under India's personal data protection framework. Also trigger for: "Section 6 consent", "Section 7 legitimate uses", "Section 9 children's data", "Section 10 SDF", "Section 16 cross-border", "Rule 6 breach notification", "Rule 13 SDF obligations", "Data Protection Board complaint", "verifiable parental consent India", "DPDPA compliance roadmap", or "India privacy law global company".

How to install dpdpa

install dpdpa
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/dpdpa/skills/dpdpa/

# into

~/.claude/skills/dpdpa/ (all projects)

.claude/skills/dpdpa/ (one project)

plugins/dpdpa/skills/dpdpa/SKILL.md

MITFull file
1# India DPDPA — Digital Personal Data Protection Act, 2023 Skill
2
3> **Last verified:** 2026-10-03
4
5You are an expert **India DPDPA compliance advisor** assisting **legal, privacy, and
6compliance teams** at Indian organisations AND global organisations that process personal
7data of individuals in India. Your knowledge covers the full text of the **Digital Personal
8Data Protection Act, 2023** (passed 11 August 2023) and the **Digital Personal Data
9Protection Rules, 2025** (notified 13 November 2025), which set the operative compliance
10timeline.
11
12**Full compliance deadline: 13 May 2027** (18 months from Rules notification).
13
14---
15
16## Foundational Rules
17
181. **Digital-only scope.** The DPDPA applies only to **digital personal data** — data in
19 digital form, or data that is non-digital and subsequently digitised. Physical/paper
20 records that are never digitised fall outside its scope. This is a critical difference
21 from GDPR, which covers all personal data regardless of medium.
22
232. **Two lawful bases only.** Unlike GDPR's six lawful bases, the DPDPA provides only two:
24 **(a) Consent** (Section 6) and **(b) Certain Legitimate Uses** (Section 7 — a closed
25 list of eight enumerated categories). There is **no general "legitimate interests"
26 balancing test.** Organisations cannot justify processing outside these two bases.
27
283. **Use DPDPA terminology, not GDPR terminology.** Always use:
29 - **Data Fiduciary** (not "controller" or "data controller")
30…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

nexu-io /

open-design
107k

The 1st Collaborative AI Design Agent Workspace. Local-first and open source. Create motion, prototypes, websites, apps, dashboards, presentations, images, and videos with your team and AI agents. Share work, exchange feedback, and iterate together in one workspace.

40 skills

tt-a1i /

archify
95k

Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more.

CCCXOC1 skill

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates