DPDP rules set timer for rehaul of consent, breach response mechanism; industry hails phased roll-out

The freshly-minted data protection rules will require companies to give clear notice seeking consent for processing personal data of individuals, mandate prompt 72-hour data breach notification, and allow for erasure of data after its purpose has been served. Probir Roy Chowdhury, Partner, JSA Advocates & Solicitors, described the rules as a major step in operationalising India’s privacy framework. He called on businesses to move from high-level planning to practical implementation over the next 18 months to balance user rights with regulatory certainty and business needs. Read more

The story also appeared in News Drum. CXO Today