Explore our insights

PolicyCast decodes India’s DPDP Rules 2025, covering compliance priorities, Data Protection Board roles and the path to full data protection compliance by 2027.

How the DPDP Act shapes India’s AI ecosystem through stronger privacy, governance, and responsible innovation.

As part of Grant Thornton Bharat’s Risk Week 2025, we are bringing you our latest podcast 'Mandate to Momentum – Navigating India’s Data Privacy Era'. In this episode, our leader, Akshay Garkel, along with industry experts, unpacks the Digital Personal Data Protection Act (DPDPA) and its impact on businesses.

India has activated the DPDP Act with phased compliance, new rules, and a Data Protection Board. Businesses must strengthen data governance and prepare for stricter oversight over the next 18 months.

This article discusses the introduction of the Digital Personal Data Protection Act and its implications for businesses, especially in the e-commerce and D2C sectors. It covers various aspects- the need for express user consent, data collection and usage limitations, data security measures, breach notifications, and the role of data fiduciaries. The article also offers recommendations for businesses to ensure compliance and build consumer trust in an era of increasing data protection awareness.

The Digital personal data protection act 2023 aims to protect personal data, empower individuals, and enforce strict data handling standards. Get your DPDP report now.