As India brings the Digital Personal Data Protection Act, 2025 into effect, organisations must strengthen their data governance, security controls, and compliance mechanisms to meet the evolving regulatory landscape. With phased enforcement beginning this year, the responsibilities and expectations for Data Fiduciaries, Significant Data Fiduciaries, and Consent Managers have increased substantially.

Key Highlights:

• Key obligations under the DPDPA and DPDP Rules, 2025
• The phased enforcement timelines organisations must prepare for
• Minimum security safeguards and breach-notification requirements
• Applicable exemptions and their implications for compliance strategies

Read our insights