{"id":10614,"date":"2026-10-29T19:30:44","date_gmt":"2026-10-29T14:00:44","guid":{"rendered":"https:\/\/mitigata.com\/blog\/?p=10614"},"modified":"2026-10-29T19:38:41","modified_gmt":"2026-10-29T14:08:41","slug":"dpdp-act-compliance-smbs","status":"publish","type":"post","link":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/","title":{"rendered":"DPDP Act Compliance for SMBs: Rules &#038; Timeline"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"10614\" class=\"elementor elementor-10614\">\n\t\t\t\t<div class=\"elementor-element elementor-element-545a600 e-flex e-con-boxed crt-sticky-section-no e-con e-parent\" data-id=\"545a600\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-80ebb7c elementor-widget elementor-widget-text-editor\" data-id=\"80ebb7c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Protecting personal data is not just a cybersecurity concern. It is a business resilience decision and responsibility. To establish a framework for protecting digital personal data, India enacted the Digital Personal Data Protection (DPDP) Act in 2023. The DPDP Rules, 2025, provide further details on its implementation.<\/p><p>For small and medium-sized businesses, it is essential to understand the phased compliance timelines that translate requirements into practical measures to protect personal data and prepare for their responsibilities.<\/p><h2>What Is DPDP Act Compliance?<\/h2><p>DPDP Act compliance refers to an organisation\u2019s adherence to obligations and rules established under India\u2019s Digital Personal Data Protection Act, 2023, and the applicable DPDP Rules, 2025, when processing digital personal data.<\/p><p>The framework establishes responsibilities for organisations handling personal data and rights for the individuals to whom that data relates. Depending on their activities, businesses must provide clear information about data processing, obtain consent where required, implement reasonable security safeguards, notify relevant parties of personal data breaches, and support applicable individual rights.<\/p><p>Compliance goes beyond publishing a privacy policy. Businesses must understand the what, why, who and how of personal data.<\/p><h2 data-pm-slice=\"1 1 []\">Why Choose Mitigata for DPDP Compliance?<\/h2><p>DPDP compliance can be complex for SMBs with limited resources and evolving regulatory requirements. Mitigata simplifies compliance with a practical, risk-based approach, helping businesses strengthen data protection without adding unnecessary operational complexity.<\/p><p>Here&#8217;s what makes Mitigata a valuable compliance partner:<\/p><ul data-spread=\"false\"><li><strong>End-to-End Support:<\/strong> From gap assessments and data mapping to security safeguards and breach response readiness.<\/li><li><strong>Business-Focused Approach:<\/strong> Tailored compliance strategies aligned with your business size, operations, and risk exposure.<\/li><li><strong>Security and Compliance Together:<\/strong> Integrates cybersecurity measures with regulatory obligations for stronger data protection.<\/li><li><strong>Actionable Roadmap:<\/strong> Prioritised steps, clear responsibilities, and practical guidance to improve readiness.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5db4d73 e-flex e-con-boxed crt-sticky-section-no e-con e-parent\" data-id=\"5db4d73\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b90ce9f e-con-full e-flex crt-sticky-section-no e-con e-child\" data-id=\"b90ce9f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f0c0670 elementor-widget elementor-widget-heading\" data-id=\"f0c0670\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Buying Cyber Insurance?\n<span style=\"color:#04DB7F\">Start with the Right Partner.<\/span><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3d7683e elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"3d7683e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c64176b elementor-widget elementor-widget-text-editor\" data-id=\"c64176b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Save more with Mitigata and get exclusive tools to monitor your digital footprint proactively.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7f3502c elementor-align-left elementor-widget elementor-widget-button\" data-id=\"7f3502c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/mitigata.com\/bookDemo\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Talk to Our Experts today!<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-542930b e-con-full e-flex crt-sticky-section-no e-con e-child\" data-id=\"542930b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3f91c8f elementor-widget elementor-widget-image\" data-id=\"3f91c8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"277\" src=\"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/05\/Mitigata-Full-Stack-Logo-white-2-6.png\" class=\"attachment-large size-large wp-image-10167\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-347b4b0 e-flex e-con-boxed crt-sticky-section-no e-con e-parent\" data-id=\"347b4b0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0359ce4 elementor-widget elementor-widget-text-editor\" data-id=\"0359ce4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Why SMBs Need a DPDP Readiness Plan<\/h2><p>For SMBs, preparing for DPDP compliance can be challenging, with limited budgets, lean teams, and data protection responsibility spread across multiple functions.<\/p><p>With no structured plan, businesses may overlook the location of personal data, who has access to it, or whether existing security controls adequately protect it.<\/p><p>A readiness plan helps SMB owners identify gaps, assign responsibilities, prioritise improvements, and allocate resources based on business risk and need.<\/p><p>With the principal operational obligations scheduled to commence in May 2027, SMBs can take a phased approach rather than leave preparation until the deadlines are closer.<\/p><h2>The DPDP Rules 2025 Timeline: Three Dates That Matter<\/h2><p>There is no single compliance deadline for the DPDP Act. Its provisions take effect in phases, so businesses can differentiate between requirements already in force and those scheduled to commence later.<\/p><p>Three gazette notifications dated November 13, 2025, set this timeline in motion. G.S.R. 843(E) brings the sections of the Act into force in stages, G.S.R. 844(E) establishes the Data Protection Board of India, and G.S.R. 846(E) notifies the DPDP Rules, 2025, which carry their own phased commencement under Rule 1. Read together, they create three stages.<\/p><ul><li><strong>November 13, 2025 (initial provisions): <\/strong>Institutional and administrative provisions came into force, including the definitions, the provisions relating to the Data Protection Board of India, and the rules governing the Board\u2019s appointment and functioning (Rules 1, 2 and 17 to 21).<\/li><li><strong>November 13, 2026 (one-year phase): <\/strong>Provisions concerning Consent Managers, including their registration and obligations under Rule 4, are scheduled to commence.<\/li><li><strong>May 13, 2027 (18-month phase): <\/strong>The principal operational provisions are scheduled to commence, covering key responsibilities for personal data processing, consent, security safeguards, breach notification, and individual rights.<\/li><\/ul><p>It is worth noting that the provisions in force today are institutional in nature, and no operational obligation under the DPDP Act currently applies to businesses. However, existing legal requirements continue to operate independently. The SPDI Rules under the Information Technology Act remain in force, and the CERT-In directions on cyber incident reporting already apply.<\/p><p>These dates reflect the published gazette notifications. Businesses should check official notifications for any subsequent changes and identify which provisions apply to their operations at each stage.<\/p><h2>Are You a Data Fiduciary?<\/h2><p>Under the DPDP Act, a Data Fiduciary is a person who, alone or in conjunction with others, determines the purpose and means of processing personal data. A Data Processor processes personal data on behalf of a Data Fiduciary.<\/p><p>An SMB may be a Data Fiduciary when it collects or uses personal data for its own business purposes. For instance, information such as:<\/p><ul><li>Customer names, contact details, and purchase records.<\/li><li>Employee and job applicant information.<\/li><li>Sales leads and website inquiries.<\/li><li>Personal data collected through business applications and online services.<\/li><\/ul><p>Businesses may also engage third-party service providers to process data on their behalf. Outsourcing payroll, hosting customer information, or using a customer relationship management platform does not remove a business\u2019s responsibilities as a Data Fiduciary. Section 8(1) of the Act makes the Data Fiduciary responsible for compliance irrespective of any agreement to the contrary.<\/p><p>The relevant question is not how large the business is. It is whether the Act applies to the data being processed and what role the business plays in that processing.<\/p><h2>Security Safeguards: Where the \u20b9250 Crore Penalty Sits<\/h2><p>The DPDP Act requires Data Fiduciaries to protect personal data with reasonable security safeguards. Rule 6 of the DPDP Rules prescribes the minimum measures every Data Fiduciary must adopt, including encryption, obfuscation, masking or virtual tokens, access control, logging and monitoring, backups, and contractual safeguards with Data Processors.<\/p><p>SMBs can start by assessing existing controls instead of assuming that compliance requires buying new tools.<\/p><p>Practical measures include:<\/p><ul><li>Restricting access to personal data according to business need.<\/li><li>Applying appropriate encryption, obfuscation, masking or other data protection measures.<\/li><li>Maintaining logs and monitoring access to detect unauthorised activity, and retaining logs and related personal data for at least one year, unless another law requires a longer period.<\/li><li>Keeping backups to support continued processing and recovery following data loss or compromise.<\/li><li>Reviewing retention practices and access permissions.<\/li><li>Including appropriate security requirements in contracts with Data Processors.<\/li><\/ul><p>The Act provides for a maximum penalty of \u20b9250 crore for failure to take reasonable security safeguards to prevent a personal data breach.<\/p><p>Understand that this is a statutory maximum, and not an automatic penalty for every breach.<\/p><p>An SMB\u2019s priority is to identify weaknesses, determine which safeguards are appropriate to its operations, and document how those safeguards are implemented and reviewed.<\/p><h2>A 90-Day DPDP Readiness Plan for SMBs<\/h2><p>A 90-day DPDP readiness plan is a structured approach helping SMBs assess their current practices, identify compliance gaps, and prioritise the actions needed to prepare for the DPDP Act. The plan divides the preparation process into three phases, allowing businesses to address data mapping, review existing controls, and prepare their response processes in a manageable sequence. This is a preparation framework, not a statutory deadline or a guarantee of compliance.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-49b1cbd e-flex e-con-boxed crt-sticky-section-no e-con e-parent\" data-id=\"49b1cbd\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-caa9158 e-con-full e-flex crt-sticky-section-no e-con e-child\" data-id=\"caa9158\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a83af76 elementor-widget elementor-widget-heading\" data-id=\"a83af76\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\"> Get DPDP Ready \n\n<span style=\"color:#04DB7F\">Before Deadlines Catch Up.<\/span><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ca6242 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"1ca6242\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bbf9752 elementor-widget elementor-widget-text-editor\" data-id=\"bbf9752\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Work with Mitigata to assess gaps, fix risks, and build a compliance program that holds up.<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-04681fb elementor-align-left elementor-widget elementor-widget-button\" data-id=\"04681fb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/mitigata.com\/bookDemo\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Talk to Our Experts today!<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b8a5116 e-con-full e-flex crt-sticky-section-no e-con e-child\" data-id=\"b8a5116\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-892c6b4 elementor-widget elementor-widget-image\" data-id=\"892c6b4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"277\" src=\"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/05\/Mitigata-Full-Stack-Logo-white-2-6.png\" class=\"attachment-large size-large wp-image-10167\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-422baa1 e-flex e-con-boxed crt-sticky-section-no e-con e-parent\" data-id=\"422baa1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-466c429 elementor-widget elementor-widget-text-editor\" data-id=\"466c429\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3>Days 1\u201330: Map the Data<\/h3><p>Identify the personal data. Include information held in business applications, email systems, employee records, customer databases, websites, and third-party platforms. Document why the data is collected, where it is stored, who can access it, and which third parties process it. This creates a clearer picture of the business\u2019s data flows and responsibilities.<\/p><h3>Days 31\u201360: Assess Consent, Vendors, and Security Controls<\/h3><p>Review privacy notices and consent practices where applicable. Check whether individuals receive the required information and whether processes exist to handle consent withdrawal and other applicable requests.<\/p><p>Review vendor access, data-sharing arrangements, and contractual security provisions. Assess access permissions, authentication, encryption, backups, logging, and retention practices.<\/p><p>Prioritise the gaps based on their potential impact and the effort required to address them, assigning an owner and target date to each action.<\/p><h3>Days 61\u201390: Prepare and Test<\/h3><p>Define how the business will escalate and respond to a personal data breach. Assign responsibilities across the relevant stakeholders.<\/p><p>Document how incidents will be assessed, evidence will be preserved, and required notifications will be prepared and delivered. Test the process through a tabletop exercise and record the gaps identified.<\/p><p>The outcome should be a documented response and notification process, findings from the exercise, and a remediation plan with clear responsibilities and timelines.<\/p><h2>DPDP Breach Notification: Is Your Business Ready to Respond?<\/h2><p>A security incident and a personal data breach are not the same thing. Businesses need a process to assess whether an incident has compromised personal data and to determine the appropriate response.<\/p><p>Rule 7 of the DPDP Rules requires the Data Fiduciary, on becoming aware of a personal data breach, to notify each affected individual without delay and to inform the Data Protection Board of India without delay. The Board must then receive detailed information within 72 hours of the Data Fiduciary becoming aware of the breach, unless the Board permits a longer period on a written request. These requirements are scheduled to commence in May 2027.<\/p><p>Separately, the CERT-In directions under the Information Technology Act already apply and operate independently of the DPDP Rules. These include the requirement to report specified cyber incidents to CERT-In within six hours of noticing them. Breach response planning should therefore account for both regimes.<\/p><p>Businesses should establish clear escalation paths, identify who is responsible for assessing a breach, maintain relevant records, and determine how notifications will be prepared and delivered.<\/p><p>The process should also account for third-party systems. If a service provider detects an incident involving data processed on the business\u2019s behalf, the business needs a way to receive that information and coordinate its response.<\/p><h2>Conclusion<\/h2><p>DPDP readiness starts with SMBs understanding how they handle personal data and what responsibilities follow from that processing. The objective is to build a practical approach that connects data visibility, appropriate security safeguards, third-party oversight, and breach response. A phased plan can help businesses identify gaps, assign ownership, and direct limited resources toward the work that matters before the principal operational obligations commence in May 2027.<\/p><p>Is your business DPDP ready? Book a call with Mitigata to establish a practical DPDPA compliance framework by identifying personal data flows, managing consent and data principal requests, implementing Data Fiduciary obligations, strengthening breach response processes, and governing third-party data handling.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8bd70da e-flex e-con-boxed crt-sticky-section-no e-con e-parent\" data-id=\"8bd70da\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-812e8a5 e-con-full e-flex crt-sticky-section-no e-con e-child\" data-id=\"812e8a5\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1f24c66 elementor-widget elementor-widget-heading\" data-id=\"1f24c66\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Compliance Should \n\n\n <span style=\"color:#04DB7F\"> Run Itself <\/span><\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-31ba56e elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"31ba56e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-57cf8bd elementor-widget elementor-widget-text-editor\" data-id=\"57cf8bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Gordon automates controls, evidence, and policies from one AI-powered platform.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a03e252 elementor-align-left elementor-widget elementor-widget-button\" data-id=\"a03e252\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/mitigata.com\/bookDemo\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Talk to Our Experts today!<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1af635f e-con-full e-flex crt-sticky-section-no e-con e-child\" data-id=\"1af635f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-efcd571 elementor-widget elementor-widget-image\" data-id=\"efcd571\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"277\" src=\"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/05\/Mitigata-Full-Stack-Logo-white-2-6.png\" class=\"attachment-large size-large wp-image-10167\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8a1e09c e-flex e-con-boxed crt-sticky-section-no e-con e-parent\" data-id=\"8a1e09c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4f1d46b elementor-widget elementor-widget-text-editor\" data-id=\"4f1d46b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>FAQs<\/h2><h3>Q1. When must SMBs comply with the DPDP Act?<\/h3><p>The Act has a phased commencement timeline, with the principal operational provisions scheduled for May 13, 2027. Businesses should verify the applicable requirements against official notifications.<\/p><h3>Q2. Does the DPDP Act apply to small and medium-sized businesses?<\/h3><p>Applicability depends on the processing of digital personal data and the organisation\u2019s role. SMBs that determine the purposes and means of processing personal data may have obligations as Data Fiduciaries.<\/p><h3>Q3. What is the penalty for non-compliance with the DPDP Act?<\/h3><p>The Act provides for penalties of up to \u20b9250 crore for failure to take reasonable security safeguards to prevent a personal data breach, and up to \u20b9200 crore for failure to notify the Data Protection Board or affected individuals of a personal data breach. The maximum penalty depends on the specific contravention and is not automatically imposed for every breach.<\/p><h3>Q4. What security measures should SMBs implement for DPDP readiness?<\/h3><p>Relevant measures include appropriate access controls, encryption or other data protection measures, access logging and monitoring with at least one year of log retention, backups, and security provisions in contracts with Data Processors. The appropriate measures depend on the data and processing involved.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Protecting personal data is not just a cybersecurity concern. It is a business resilience decision and responsibility. To establish a&hellip;<\/p>\n","protected":false},"author":21,"featured_media":10616,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":"","_members_access_role":[],"_members_access_error":""},"categories":[1],"tags":[],"class_list":["post-10614","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.9 (Yoast SEO v28.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>DPDP Act Compliance for SMBs: A 2026 Readiness Plan<\/title>\n<meta name=\"description\" content=\"Explore DPDP Act compliance for SMBs, key deadlines under the DPDP Rules 2025, data fiduciary obligations, and steps to prepare for May 2027.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DPDP Act Compliance for SMBs: Rules &amp; Timeline\" \/>\n<meta property=\"og:description\" content=\"Explore DPDP Act compliance for SMBs, key deadlines under the DPDP Rules 2025, data fiduciary obligations, and steps to prepare for May 2027.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/\" \/>\n<meta property=\"og:site_name\" content=\"Mitigata Cyber insurance &amp; security blogs\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-29T14:00:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-29T14:08:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/10\/Blog-Cover-Images-16.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Pratyasha\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@mitigata\" \/>\n<meta name=\"twitter:site\" content=\"@mitigata\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pratyasha\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/\"},\"author\":{\"name\":\"Pratyasha\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#\\\/schema\\\/person\\\/6cfa070617f3bca58b5ff0931b0e18ef\"},\"headline\":\"DPDP Act Compliance for SMBs: Rules &#038; Timeline\",\"datePublished\":\"2026-10-29T14:00:44+00:00\",\"dateModified\":\"2026-10-29T14:08:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/\"},\"wordCount\":1921,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Blog-Cover-Images-16.png\",\"articleSection\":[\"Cyber Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/\",\"url\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/\",\"name\":\"DPDP Act Compliance for SMBs: A 2026 Readiness Plan\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Blog-Cover-Images-16.png\",\"datePublished\":\"2026-10-29T14:00:44+00:00\",\"dateModified\":\"2026-10-29T14:08:41+00:00\",\"description\":\"Explore DPDP Act compliance for SMBs, key deadlines under the DPDP Rules 2025, data fiduciary obligations, and steps to prepare for May 2027.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#primaryimage\",\"url\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Blog-Cover-Images-16.png\",\"contentUrl\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Blog-Cover-Images-16.png\",\"width\":1200,\"height\":600,\"caption\":\"DPDP Act compliance for SMBs\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/dpdp-act-compliance-smbs\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DPDP Act Compliance for SMBs: Rules &#038; Timeline\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/\",\"name\":\"Mitigata Cyber insurance & security blogs\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#organization\"},\"alternateName\":\"Mitigata - smart cyber insurance\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#organization\",\"name\":\"Mitigata: Smart Cyber insurance\",\"url\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/Mitigata-Full-Stack-Logo-Black.png\",\"contentUrl\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/Mitigata-Full-Stack-Logo-Black.png\",\"width\":648,\"height\":280,\"caption\":\"Mitigata: Smart Cyber insurance\"},\"image\":{\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/mitigata\",\"https:\\\/\\\/www.instagram.com\\\/mitigata_insurance\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/mitigata-insurance\\\/\"],\"legalName\":\"Mitigata Insurance Broker private limited\",\"foundingDate\":\"2021-07-30\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"51\",\"maxValue\":\"200\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/#\\\/schema\\\/person\\\/6cfa070617f3bca58b5ff0931b0e18ef\",\"name\":\"Pratyasha\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae49438a2ec9cd40f9338956597539783764e3e2efadfde60579f80678e13ead?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae49438a2ec9cd40f9338956597539783764e3e2efadfde60579f80678e13ead?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ae49438a2ec9cd40f9338956597539783764e3e2efadfde60579f80678e13ead?s=96&d=mm&r=g\",\"caption\":\"Pratyasha\"},\"url\":\"https:\\\/\\\/mitigata.com\\\/blog\\\/author\\\/pratyasha\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"DPDP Act Compliance for SMBs: A 2026 Readiness Plan","description":"Explore DPDP Act compliance for SMBs, key deadlines under the DPDP Rules 2025, data fiduciary obligations, and steps to prepare for May 2027.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/","og_locale":"en_US","og_type":"article","og_title":"DPDP Act Compliance for SMBs: Rules & Timeline","og_description":"Explore DPDP Act compliance for SMBs, key deadlines under the DPDP Rules 2025, data fiduciary obligations, and steps to prepare for May 2027.","og_url":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/","og_site_name":"Mitigata Cyber insurance &amp; security blogs","article_published_time":"2026-10-29T14:00:44+00:00","article_modified_time":"2026-10-29T14:08:41+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/10\/Blog-Cover-Images-16.png","type":"image\/png"}],"author":"Pratyasha","twitter_card":"summary_large_image","twitter_creator":"@mitigata","twitter_site":"@mitigata","twitter_misc":{"Written by":"Pratyasha","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#article","isPartOf":{"@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/"},"author":{"name":"Pratyasha","@id":"https:\/\/mitigata.com\/blog\/#\/schema\/person\/6cfa070617f3bca58b5ff0931b0e18ef"},"headline":"DPDP Act Compliance for SMBs: Rules &#038; Timeline","datePublished":"2026-10-29T14:00:44+00:00","dateModified":"2026-10-29T14:08:41+00:00","mainEntityOfPage":{"@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/"},"wordCount":1921,"commentCount":0,"publisher":{"@id":"https:\/\/mitigata.com\/blog\/#organization"},"image":{"@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#primaryimage"},"thumbnailUrl":"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/10\/Blog-Cover-Images-16.png","articleSection":["Cyber Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/","url":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/","name":"DPDP Act Compliance for SMBs: A 2026 Readiness Plan","isPartOf":{"@id":"https:\/\/mitigata.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#primaryimage"},"image":{"@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#primaryimage"},"thumbnailUrl":"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/10\/Blog-Cover-Images-16.png","datePublished":"2026-10-29T14:00:44+00:00","dateModified":"2026-10-29T14:08:41+00:00","description":"Explore DPDP Act compliance for SMBs, key deadlines under the DPDP Rules 2025, data fiduciary obligations, and steps to prepare for May 2027.","breadcrumb":{"@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#primaryimage","url":"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/10\/Blog-Cover-Images-16.png","contentUrl":"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2026\/10\/Blog-Cover-Images-16.png","width":1200,"height":600,"caption":"DPDP Act compliance for SMBs"},{"@type":"BreadcrumbList","@id":"https:\/\/mitigata.com\/blog\/dpdp-act-compliance-smbs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/mitigata.com\/blog\/"},{"@type":"ListItem","position":2,"name":"DPDP Act Compliance for SMBs: Rules &#038; Timeline"}]},{"@type":"WebSite","@id":"https:\/\/mitigata.com\/blog\/#website","url":"https:\/\/mitigata.com\/blog\/","name":"Mitigata Cyber insurance & security blogs","description":"","publisher":{"@id":"https:\/\/mitigata.com\/blog\/#organization"},"alternateName":"Mitigata - smart cyber insurance","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mitigata.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/mitigata.com\/blog\/#organization","name":"Mitigata: Smart Cyber insurance","url":"https:\/\/mitigata.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mitigata.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2025\/08\/Mitigata-Full-Stack-Logo-Black.png","contentUrl":"https:\/\/mitigata.com\/blog\/wp-content\/uploads\/2025\/08\/Mitigata-Full-Stack-Logo-Black.png","width":648,"height":280,"caption":"Mitigata: Smart Cyber insurance"},"image":{"@id":"https:\/\/mitigata.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/mitigata","https:\/\/www.instagram.com\/mitigata_insurance\/","https:\/\/www.linkedin.com\/company\/mitigata-insurance\/"],"legalName":"Mitigata Insurance Broker private limited","foundingDate":"2021-07-30","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"51","maxValue":"200"}},{"@type":"Person","@id":"https:\/\/mitigata.com\/blog\/#\/schema\/person\/6cfa070617f3bca58b5ff0931b0e18ef","name":"Pratyasha","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/ae49438a2ec9cd40f9338956597539783764e3e2efadfde60579f80678e13ead?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ae49438a2ec9cd40f9338956597539783764e3e2efadfde60579f80678e13ead?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ae49438a2ec9cd40f9338956597539783764e3e2efadfde60579f80678e13ead?s=96&d=mm&r=g","caption":"Pratyasha"},"url":"https:\/\/mitigata.com\/blog\/author\/pratyasha\/"}]}},"_links":{"self":[{"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/posts\/10614","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/comments?post=10614"}],"version-history":[{"count":11,"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/posts\/10614\/revisions"}],"predecessor-version":[{"id":10628,"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/posts\/10614\/revisions\/10628"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/media\/10616"}],"wp:attachment":[{"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/media?parent=10614"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/categories?post=10614"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mitigata.com\/blog\/wp-json\/wp\/v2\/tags?post=10614"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}