DPDP Act : Brace yourselves for the biggest game-changing legislation for India

Indian companies will have to invest in comprehensive data mapping, consent management systems, and privacy-by-design approaches, and totally comply with DPDP Act, 2023 and its rules to avoid exposure to exemplary fines of Rs 250 crores per contravention, stipulated under this data protection law. Dr. Pavan Duggal, Advocate, Supreme Court of India and Expert in Cyber & AI laws decodes the cybersecurity trends, impact of AI, emergence of DPO and preparedness of Indian companies for the upcoming law.

Q. Which are the mega trends in the world of cybersecurity and data privacy that will impact Indian organisations in 2025 and why?

Dr. Duggal: Indian organizations need to be prepared for 5 major trends in cybersecurity and data privacy in 2025.

1. Regulatory Compliance Evolution – The full implementation of India’s Digital Personal Data Protection (DPDP) Act, 2023 being a game changing legislation, will force organizations to fundamentally transform their data handling practices. Companies will have to invest in comprehensive data mapping, consent management systems, and privacy-by-design approaches, and totally comply with DPDP Act, 2023 and its rules to avoid exposure to exemplary fines of Rs 250 crores per contravention, stipulated under this data protection law.