India, Sept. 2 -- New data protection rules, rising breach costs and fragmented data environments are forcing enterprises to reassess how they manage personal information and respond to privacy risks.

The notification of India's Digital Personal Data Protection (DPDP) Rules in November 2025 has put greater focus on enterprise readiness, with enforcement and penalties of up to Rs 250 crore expected to come into effect by May 2027.

However, many organisations are still struggling to translate the regulatory requirements into operational processes. According to industry indicators cited by GoTrust, 70% of organisations continue to face challenges in interpreting the regulation, while 80% have yet to update their privacy policies or framewo...