Opsio launches DPDP readiness service for Indian companies

Opsio has launched a DPDP Compliance Readiness service in Bengaluru to help Indian organizations prepare for the Digital Personal Data Protection Act before phased deadlines in November 2026 and May 2027. The offering combines gap assessments, remediation planning and breach-response drills as companies race to close compliance gaps.

Why it matters: - Indian organizations have two major DPDP deadlines to hit: consent-manager readiness by 13 November 2026 and full operational compliance by mid-May 2027. - The service targets a growing compliance gap as surveys suggest many organizations have not yet updated privacy policies, frameworks or workflows. - The offering also addresses CERT-In breach-response expectations, which raise exposure for organizations that cannot document and rehearse incident reporting.

What happened: - Opsio, a Swedish cloud and cybersecurity company with a delivery centre in Bengaluru, launched its DPDP Compliance Readiness service on 23 September 2026. - The service is designed for Indian organizations preparing for the Digital Personal Data Protection Act, 2023 and the DPDP Rules notified on 13 November 2025. - Opsio said the service is available immediately across India. - Engagements begin with a two-week DPDP gap assessment.

The details: - The phased DPDP timeline makes consent-manager provisions effective in November 2026. - The remaining obligations, including notice, consent, breach reporting and data principal rights, apply from May 2027. - Opsio’s programme maps data flows, policies and technical controls against the DPDP Rules. - The company then builds a prioritised remediation roadmap tied to the November 2026 and May 2027 deadlines. - The implementation scope includes consent-manager integration, notice and consent workflows, data principal rights handling and breach-reporting runbooks. - The service also includes rehearsed six-hour CERT-In incident-response drills with evidence trails showing detection and filing timestamps. - Opsio said the service draws on a decade of experience helping European organisations through GDPR. - The work is delivered from Opsio’s ISO 27001-certified centre in Bengaluru. - Opsio is headquartered in Karlstad, Sweden, and also runs a dedicated AI Lab in Bengaluru. - The company provides managed cloud services on Amazon Web Services, Microsoft Azure and Google Cloud, along with cybersecurity and regulatory compliance services covering GDPR, ISO 27001 and India’s DPDP Act.

Between the lines: - Opsio is positioning DPDP compliance as both a legal and operational issue, not just a policy update. - The company is also bundling DPDP work with CERT-In breach readiness, signaling that incident-response maturity may become a bigger enforcement focus in 2026. - Daniel Hedlund, Opsio’s chairman, said India is at the same early stage Europe faced before GDPR, when urgency stayed low until consultants became scarce and expensive. - Praveena Shenoy, Opsio’s country manager in India, said many organizations are unsure how to interpret the law and need a concrete checklist to prove compliance.

What's next: - Opsio expects organizations to use the remaining months before November 2026 to complete consent-manager integration. - The company is scoping remediation plans that aim to reach full DPDP compliance before the May 2027 deadline. - Early assessments may become more valuable as deadlines approach and compliance costs rise.

The bottom line: - Opsio is betting Indian companies will move now rather than wait for enforcement pressure, and the service is built to turn DPDP requirements into a staged implementation plan.