Industry must invest in consent, embed data protection

The industry must now prioritise investments in consent, embedding data protection as a core element of digital operations rather than treating it as an expense, said experts in reaction to the government’s notification of the Digital Personal Data Protection Act, a move seen as a decisive shift toward a “Trust Economy.”

- 

According to industry executives and legal experts, the law signals the end of unchecked bulk collection of personal data and ushers in an era where precision, accountability and user rights are central to every digital interaction. They noted that for citizens, the framework introduces a transformed digital reality-one where individuals gain the power to correct, erase and meaningfully control their personal information. “The Digital Personal Data Protection Act notification of today marks the definitive pivot towards a Trust Economy where bulk personally identifiable information (PII) collection will be replaced by a mandate for precision and accountability at every digital exchange. Certainly, the industry must now invest in consent, making data protection a foundation for commerce and not a cost to it,” said Santosh Singh, Senior Vice President, IT at DS Group. On November 14, the Centre notified the Digital Personal Data Protection (DPDP) Rules, 2025, marking the full operationalisation of the DPDP Act, 202