Future of cybersecurity.lies in anticipating threats, not reacting to them,

ATUL GUPTA - PARTNER AND HEAD - DIGITAL TRUST AND CYBER SECURITY SERVICES, KPMG IN INDIA

- 

Cybersecurity and data governance have become paramount concerns for Indian businesses right now. Atul Gupta, Leader of Cyber Security Services at KPMG in India, brings over 17 years of experience in IT advisory, cybersecurity, and information risk management to the table.

With a proven track record of delivering large-scale IT projects and advising clients across various industries, including Telecom, BFSI, Technology, and Energy, Atul shares his expertise on India's Draft DPDP Rules 2025 and the importance of governance-first cybersecurity in building long-term digital trust.

In this exclusive interview, Atul offers valuable insights on the challenges and opportunities arising from the new regulatory framework, and how businesses can prioritize cybersecurity investments, leverage AI responsibly, and embed digital trust into their long-term transformation roadmaps.

What are the top three cybersecurity and compliance challenges Indian businesses must address under the Draft DPDP Rules, 2025?

Draft DPDP rules are progressive and straightforward, and should enable the country to strengthen its data protection regime. Data privacy today transcends beyond compliance for global business, and it is a strategic imperative for establishing trust, enhancing reputation and driving success. Key considerations for Indian businesses are:

Data localisation: The draft rules mandate businesses to store critical data within the country. This may require significant investments in local infrastructure and data centers.

Consent management: Obtaining explicit consent for data collection and usage is crucial. Businesses need to implement robust consent management systems to comply with the regulations.