The government notified rules under the Digital Personal Data Protection Act, 2023, operationalising India’s first personal data protection regime. Experts say the rules enforce consent, privacy by design, and accountability, giving organisations 18 months to comply under the new framework.
