Post-DPDP Rule Notification: Key Challenges for Banks & Financial Institutions

Executive Summary

The Digital Personal Data Protection (DPDP) Act, 2023 is India’s new data-privacy law that governs how personal data of individuals (Data Principals) must be collected, processed, stored, shared, and deleted by organizations (Data Fiduciaries). The Act applies to all digital personal data, including offline data later digitized, and covers all sectors—banks, NBFCs, fintechs, insurers, telecoms, IT firms, government...