DPDP Act 2023
DPDP Data Principal Request Estimator
Estimate the monthly workload and cost of handling DPDP data principal (DSR) requests.
How this is calculated
- Monthly hours = requests per month x minutes per request / 60.
- Monthly cost = monthly hours x your fully loaded hourly cost; annual cost = monthly cost x 12.
- Colour by workload: 160 or more hours a month (roughly one full-time person) is red, 40 or more amber, less than 40 green.
- The intake channels you select only add a note; they do not change the cost.
Constants the tool uses
Unless a value names a study, it is VITI Security's working estimate for budgeting - not taken from a statute or a dated study - so treat it as an adjustable assumption.
- Colour thresholds (hours a month)
- Amber from 40, red from 160
Worked example
The calculator run on its default inputs:
- Expected requests per month
- 50 requests
- Average handling time per request
- 45 minutes
- Fully-loaded hourly cost of the handler
- ₹800
- Intake channels you must monitor
Estimated DSR handling load
₹3.6 Lakh/yr
- Monthly effort
- 37h 30m (37.5 hrs)
- Monthly cost
- ₹30,000
- Annualized cost
- ₹3.6 Lakh
- Intake channels
With the defaults (50 requests a month, 45 minutes each, ₹800 an hour, email only): 50 x 45 / 60 = 37.5 hours a month, x ₹800 = ₹30,000 a month, or ₹3.6 lakh a year. That is under 40 hours, so it shows green.
Sources
- Digital Personal Data Protection Act, 2023 (MeitY) - Data Principal rights (ss.11-14), grievance redressal before approaching the Board (s.13)
- DPDP Rules, 2025, Rules 9 and 14 (MeitY) - publishing a contact for questions (Rule 9) and a grievance response period not exceeding 90 days (Rule 14(3))
Sources last checked September 2026.
Limitations
The figure is handling time only - not tooling, legal review or the effort of searching systems that are hard to query. Data Principals must use your grievance process before going to the Board (s.13(3)), so a slow queue becomes a regulatory problem. The rights take effect on 13 May 2027. This is an indicative estimate for education and planning, not legal advice. Laws and published figures change, and regulators and courts apply discretion no calculator can model - confirm with a qualified legal or compliance professional before acting on a result.