The most common competitor in DPDP sales is the client’s own staff. The published numbers deserve a look before that choice gets made.
The published numbers
An in-house DPO costs 25 to 40 lakh a year at current market rates, per Inc42's reporting in July 2026. Recruitment time, tooling, and training sit on top of the salary line.
The two hidden invoices
A first-time internal programme carries two invoices that never appear in the budget:
- The learning curve at full price. Your team learns DPDP on your payroll, making first-time mistakes on your data.
- The learning walks out. When the person who ran the programme leaves, the compliance history, the vendor context, and the judgment leave with them. The successor starts fresh.
When in-house is right
Under ten thousand users, one core system, and a privacy lead who has shipped a programme before: run it yourself. The CA test gives you the five questions for the role itself, and the fractional model covers the middle ground.
The accountability question
Every mid-market company should answer one question honestly. When the Data Protection Board sends a notice, who inside the company is accountable, and what have they done before?
Most rooms go quiet there. The quiet is the budget line.
Score your situation
Count your users. Under ten thousand keeps in-house on the table.
Count your core systems. Each one multiplies the integration work.
Has anyone on the team shipped a privacy programme before?
Price the full internal cost: salary, tools, and the months of ramp.
Write the succession plan for the day your programme owner resigns.
Next step
Bring your user count and system list. Leave with the build-or-buy answer.
Book a 30-minute call →Related reading
Written by Sushant Pasumarty
DPDP consultant. Founder, Meridian Bridge Strategy. This page began as field notes from live client work.