The Act enforces strict protections on personal data transfers, highlighted by the Reserve Bank of India's directive under Sections 10(2) and 18 of the Payment and Settlement Systems Act, 2007, requiring payment system data to be stored within India.
