DPDP compliance will be tested during a breach, Not during an audit
By Mohd Kaif Idrisi, Internal Audit Associate, Eventus Security
The real test of DPDP compliance won’t be whether an organisation has a privacy policy on paper. It will be a test of whether its people, processes and security controls work when personal data is accessed, shared, altered, lost or exposed. As companies prepare to comply with the Digital Personal Data Protection Rules, 2025, the key question is whether their security controls can truly protect personal data in case of a breach.
The DPDP Rules have been framed by the Ministry of Electronics and Information Technology (MeitY) in November 2025. The law will be implemented in phases. The main compliance deadline for a range of provisions is May 2027. However, for CISOs and compliance leaders, waiting until the relevant deadlines to start implementation could leave organisations with a lot of work to do in a tight timeframe. The challenge is that...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
