Examine of 6,000+ web sites throughout 24 sectors highlights widespread non-compliance forward of DPDP Act enforcement in 2027
Mumbai, March 31, 2026 – A complete new study by ComplyZero Research has revealed that 95.9% of Indian web sites acquire person knowledge by way of monitoring applied sciences with out acquiring correct cookie consent, probably violating the Digital Private Knowledge Safety (DPDP) Act, 2023.
The report, titled “The State of Cookie Compliance in India, 2026,” analysed greater than 6,000 web sites throughout 24 trade sectors and evaluated over 84,000 monitoring cookies to evaluate India’s preparedness for the DPDP Act’s consent necessities. The findings counsel that the overwhelming majority of organisations are considerably underprepared for compliance obligations forward of full enforcement scheduled in Could 2027.
Key Findings from the Examine
The analysis highlights a crucial compliance hole throughout industries:
- Solely 4.1% of internet sites (249 out of 6,000+) show any type of person consent mechanism.
- 95.9% of internet sites deploy monitoring cookies with out disclosure or consent.
- Authorities web sites confirmed the bottom compliance, with solely 2 out of 1,154 web sites offering consent notices.
- Practically 80% of internet sites start monitoring customers earlier than consent is granted.
- Round 82% of monitoring applied sciences are used for advertising and marketing or promoting functions, moderately than important web site performance.
- Media web sites had been probably the most aggressive trackers, averaging 30 monitoring applied sciences per web page, adopted by e-commerce web sites with a median of 24 cookies per go to.
These findings point out a widespread lack of readiness amongst Indian companies, regardless of the DPDP Act’s requirement for clear discover and knowledgeable person consent earlier than gathering private knowledge.
Authorized Perspective on DPDP Compliance
In line with Dr. Pavan Duggal, Advocate on the Supreme Court docket of India and a number one authority on cyber legislation:
“The DPDP Act is a game-changing laws that applies to all knowledge fiduciaries. Non-compliance can pose an existential menace to organisations because of potential penalties of as much as ₹250 crores per violation.”
The DPDP Act applies not solely to digital companies however to any organisation gathering private knowledge, together with healthcare suppliers, academic establishments, retailers, and repair suppliers. Organisations should guarantee correct consent assortment, safe storage of non-public knowledge, and supply people the power to entry, right, or erase their knowledge upon request.
Rising Compliance Hole Forward of 2027 Enforcement
With the Knowledge Safety Board of India (DPBI) already operational, companies should take proactive steps to make sure compliance earlier than enforcement begins in 2027. Every violation of the DPDP Act can appeal to penalties of as much as ₹250 crore, creating important authorized and monetary threat for non-compliant organisations.
Virat Shah, Founding father of ComplyZero, emphasised the urgency of consciousness and preparedness:
“This isn’t a know-how drawback. The instruments to implement cookie consent exist already. What’s lacking is consciousness that consent is now a authorized requirement, not only a greatest follow.”
Concerning the Examine
The analysis was performed in February 2026 by ComplyZero Analysis, protecting over 6,000 web sites throughout sectors together with authorities, banking, healthcare, training, media, and e-commerce. The report represents probably the most complete evaluation of DPDP cookie consent compliance performed in India so far.
The complete report is accessible at:
https://www.complyzero.com/research/state-of-cookie-compliance-india-2026
About ComplyZero
ComplyZero is India’s first self-serve DPDP compliance platform designed to assist companies implement cookie consent, privateness notices, and knowledge safety compliance inside minutes. The platform gives automated cookie scanning, multilingual consent administration throughout 22 Indian languages, and audit-ready compliance data tailor-made to the necessities of the Digital Private Knowledge Safety Act, 2023.
Media Contact
Mansi Mehta
Image Good Communication
📞 9833201004
✉️ P2communication@gmail.com
