India, Nov. 20 -- The new Digital Personal Data Protection (DPDP) Act, 2023, has got operational teeth through the DPDP Rules. They may transform the digital data economy into a regulated market. They signal the start of a new infrastructure cycle. Broad obligations will become actionable workflows for firms handling personal data. In doing so, they promise to open a market for privacy-technology start-ups while raising a new friction for India's Artificial Intelligence (AI) ambitions.

The DPDP Rules give the digital economy a sharper set of guardrails, which include clearer consent mandates, data minimisation, strict breach-notification obligations, and penalties (up to Rs 250 crore for major failures). For businesses, they shift privac...