India, Nov. 14 -- By- Akshay Garkel, Partner & Leader, Cyber, Grant Thornton Bharat

The Government of India has formally moved the Digital Personal Data Protection Act, 2023 (DPDP Act) into its operational phase through three key Gazette notifications. Together, these notifications establish the legal, procedural, and institutional framework that will govern the country's personal data ecosystem over the next 18 months.

G.S.R. 843(E) - Notifies the phased implementation schedule of the Act, with obligations taking effect immediately, after 12 months, and after 18 months.

G.S.R. 845(E) - Constitutes the Data Protection Board of India with four members, indicating that oversight and adjudication mechanisms are now formally in place.

G.S...