Summary
India's Digital Personal Data Protection Act (DPDP Act) mandates significant compliance from startups, many of whom are currently unprepared for its requirements, including data deletion and breach reporting within strict timelines. Experts emphasize that integrating privacy into operations before the May 2027 deadline is crucial for startups.