New Delhi, Nov. 18 -- Although we have known since 2023 that India's Digital Personal Data Protection Act of 2023 (DPDP Act) would come into effect sooner or later, most businesses put off taking action until the Rules were notified. Last week, the ministry of electronics and information technology brought the DPDP Act into force, marking the beginning of a new chapter in India's digital governance history.

Although data fiduciaries have been given a fairly generous 18-month transition period before the entire law comes into force, now that the clock has started ticking, everyone is worried that they may not have enough time to comply.

The DPDP Act is a relatively straightforward piece of legislation designed to do one thing and one thi...