India’s new Digital Personal Data Protection framework, comprising the DPDP Act 2023 and Rules 2025, mandates organisations to build robust, India-specific privacy compliance systems before full enforcement in May 2027. Key requirements include gap assessments, consent redesign, breach reporting, data retention alignment, and governance structures led by senior management. Challenges such as conflicting retention norms, algorithmic accountability, and data localisation remain. Organisations must adopt integrated, forward-looking compliance strategies to align domestic and global obligations while strengthening accountability, risk mitigation, and consumer trust.
Please click here to read the full article by Sajai Singh, Partner, Sankalp Inuganti, Associate, and Ayush Sahay, Associate, published in International Bar Association.
Sajai's broad-based practice focuses on Mergers, Acquisitions, Joint Ventures, strategic alliances, restructurings and financings (whether debt or equity), with particular emphasis on cross- border transactions.