Is this a consulting service?

No, this is a free, interactive software tool that calculates your potential liability under the DPDP Act 2023 in 30 seconds. It provides an instant risk score and automated action plan.

What are common DPDP violations in Third-Party Script Risk Audit?

Common violations include: Embedding third-party analytics or marketing scripts (e.g., Google Analytics, Meta Pixel) without specific, granular consent for data sharing., Failing to vet third-party vendors for DPDP compliance, data security, and contractual agreements for data processing., Not regularly monitoring or auditing external scripts for changes in their data collection practices or new permissions..

The DPDP Audit Tool

Compliance for Third-Party Script Risk Audit

⚠️

Third-Party Script Risk Audit
Liability Check

🕵️

Your website is likely leaking personal data to third-party scripts without explicit consent. DPDP penalties up to ₹250 Crore are on the line if these scripts mishandle sensitive personal data or violate user consent.

Why Third-Party Script Risk Audit is at Risk

Every script, pixel, and plugin running on your public-facing website or app is a potential DPDP liability. These external tools—from Google Analytics to a payment gateway on your e-commerce portal, or a chat widget on your SaaS platform—often act as **Data Processors** (or even co-fiduciaries) and collect **personal data** of Indian users without your direct control or explicit consent. An unchecked script can bypass your consent mechanisms, send data to unapproved locations, and create massive **data leakage** risks, potentially leading to breaches and hefty fines from the Data Protection Board.

Common Violations

1.Embedding third-party analytics or marketing scripts (e.g., Google Analytics, Meta Pixel) without specific, granular consent for data sharing.
2.Failing to vet third-party vendors for DPDP compliance, data security, and contractual agreements for data processing.
3.Not regularly monitoring or auditing external scripts for changes in their data collection practices or new permissions.

The Immediate Fix

Conduct a full inventory of every single third-party script running on your website. Use tools like browser developer tools, Google Tag Manager, or dedicated script scanners to identify them, then review each for the type of data they collect, where it's sent, and if proper consent is being obtained before execution.