Indian Firms Struggle to Locate Personal Data Amidst New Data Protection Rules

Hindustan Times · business

Indian companies are facing a significant challenge in identifying the exact location of personal data, despite increased efforts in redrafting privacy policies and consent notices. The Digital Personal Data Protection Rules, 2025, which came into effect in phases starting November 2025, mandate companies to know where data resides for compliance. Failure to implement reasonable security safeguards can lead to penalties up to ₹250 crore.