Businesses must race to meet 18-month deadline for data protection norms

Businesses, especially SMEs, are going to be hard-pressed when it comes to complying with consent management, data processing restrictions and other provisions of the Digital Personal Data Protection (DPDP) Rules within 18 months, according to experts. Probir Roy Chowdhury, Partner -JSA Advocates & Solicitors, said the firm had raised concerns regarding this provision during consultations. “This requirement/disclosure will definitely be operationally burdensome to implement – particularly, when dealing with an ongoing breach. This will not create significant company liability, provided companies can demonstrate a bona fide effort to comply,” said Chowdhury. Read more