The draft DPDP rules propose mandatory parental consent for children's accounts, data localisation requirements, and complex consent management challenges for businesses
The Act enforces strict protections on personal data transfers, highlighted by the Reserve Bank of India's directive under Sections 10(2) and 18 of the Payment and Settlement Systems Act, 2007, requiring payment system data to be stored within India.