DPDP: Breathing space for firms, but work begins now

GOVT DISCRETION ON CROSS-BORDER DATA FLOW RAISES CONCERNS

- URVI MALVANIA, OJASVI GUPTA & JYOTSNA BHATNAGAR

THE CLOCK HAS started ticking for enterprises to align with the newly notified Digital Personal Data Protection (DPDP) Rules, with experts saying that the 18-month transition must be treated not as a grace period but as an execution runway. Although the phased rollout offers breathing room, companies will have to move fast on redesigning consent architecture, notices, governance structures, vendor contracts, breachresponse systems and international data transfer flows to avoid bottlenecks asthe deadline approaches.