Examine of 6,000+ web sites throughout 24 sectors highlights widespread non-compliance forward of DPDP Act enforcement in 2027
Mumbai, March 31, 2026 – A complete new study by ComplyZero Research has revealed that 95.9% of Indian web sites gather person knowledge by monitoring applied sciences with out acquiring correct cookie consent, probably violating the Digital Private Knowledge Safety (DPDP) Act, 2023.
The report, titled “The State of Cookie Compliance in India, 2026,” analysed greater than 6,000 web sites throughout 24 trade sectors and evaluated over 84,000 monitoring cookies to evaluate India’s preparedness for the DPDP Act’s consent necessities. The findings recommend that the overwhelming majority of organisations are considerably underprepared for compliance obligations forward of full enforcement scheduled in Could 2027.
Key Findings from the Examine
The analysis highlights a essential compliance hole throughout industries:
- Solely 4.1% of internet sites (249 out of 6,000+) show any type of person consent mechanism.
- 95.9% of internet sites deploy monitoring cookies with out disclosure or consent.
- Authorities web sites confirmed the bottom compliance, with solely 2 out of 1,154 web sites offering consent notices.
- Practically 80% of internet sites start monitoring customers earlier than consent is granted.
- Round 82% of monitoring applied sciences are used for advertising or promoting functions, moderately than important web site performance.
- Media web sites had been essentially the most aggressive trackers, averaging 30 monitoring applied sciences per web page, adopted by e-commerce web sites with a mean of 24 cookies per go to.
These findings point out a widespread lack of readiness amongst Indian companies, regardless of the DPDP Act’s requirement for clear discover and knowledgeable person consent earlier than accumulating private knowledge.
Authorized Perspective on DPDP Compliance
In response to Dr. Pavan Duggal, Advocate on the Supreme Courtroom of India and a number one authority on cyber legislation:
“The DPDP Act is a game-changing laws that applies to all knowledge fiduciaries. Non-compliance can pose an existential menace to organisations because of potential penalties of as much as ₹250 crores per violation.”
The DPDP Act applies not solely to digital companies however to any organisation accumulating private knowledge, together with healthcare suppliers, instructional establishments, retailers, and repair suppliers. Organisations should guarantee correct consent assortment, safe storage of non-public knowledge, and supply people the flexibility to entry, right, or erase their knowledge upon request.
Rising Compliance Hole Forward of 2027 Enforcement
With the Knowledge Safety Board of India (DPBI) already operational, companies should take proactive steps to make sure compliance earlier than enforcement begins in 2027. Every violation of the DPDP Act can appeal to penalties of as much as ₹250 crore, creating vital authorized and monetary danger for non-compliant organisations.
Virat Shah, Founding father of ComplyZero, emphasised the urgency of consciousness and preparedness:
“This isn’t a expertise downside. The instruments to implement cookie consent exist already. What’s lacking is consciousness that consent is now a authorized requirement, not only a greatest apply.”
In regards to the Examine
The analysis was performed in February 2026 by ComplyZero Analysis, overlaying over 6,000 web sites throughout sectors together with authorities, banking, healthcare, schooling, media, and e-commerce. The report represents essentially the most complete evaluation of DPDP cookie consent compliance performed in India to this point.
The complete report is obtainable at:
https://www.complyzero.com/research/state-of-cookie-compliance-india-2026
About ComplyZero
ComplyZero is India’s first self-serve DPDP compliance platform designed to assist companies implement cookie consent, privateness notices, and knowledge safety compliance inside minutes. The platform provides automated cookie scanning, multilingual consent administration throughout 22 Indian languages, and audit-ready compliance data tailor-made to the necessities of the Digital Private Knowledge Safety Act, 2023.
Media Contact
Mansi Mehta
Image Excellent Communication
📞 9833201004
✉️ P2communication@gmail.com
