Grant Thornton Bharat’s PolicyCast is your window into policy, tax, and regulatory developments. Each episode features expert perspectives on issues that matter to businesses, individuals, and the wider economy.

India has entered its most consequential phase of data governance yet. With the notification of the DPDP Rules 2025, the country now has a clear, operational roadmap for implementing the Digital Personal Data Protection Act — signalling a decisive shift toward structured, accountable and citizen-centric data management.

In our latest episode, Jaspreet Singh, Partner, Cyber Assurance & Governance Leader, provides a clear and comprehensive analysis of what the DPDP Rules mean for organisations preparing for compliance and long-term governance maturity.

Tune in as he discusses:

  • How the DPDP Rules 2025 translate legislation into actionable compliance requirements
  • The mandate, powers and role of the Data Protection Board of India
  • The three-phase implementation pathway, culminating in full compliance by May 2027
  • Strengthened data principal rights and evolving expectations for organisations
  • Key compliance priorities across consent architecture, data lifecycle management, breach reporting and vendor oversight
  • Why this regulatory shift is central to building digital trust at national scale

This episode offers timely guidance for leaders navigating one of the most significant regulatory transformations shaping India’s digital economy.

Listen now on:

YouTube Spotify Apple Amazon Music