Demystifying DPDPA and the latest developments: What they mean for you?

In this exclusive EY India webcast, gain early insight into the Digital Personal Data Protection (DPDP) Act and impending 2025 Rules for practical guidance and sectoral impacts.

As India moves closer to the notification of the final Digital Personal Data Protection (DPDP) Rules, organizations must act swiftly to assess their readiness and operationalize compliance. To support this journey, EY hosted an exclusive webcast on 29 September 2025, led by EY Partners, to provide an early perspective on the DPDP Act and its forthcoming Rules and decode their implications for businesses across sectors.

Participants gained insights into compliance frameworks, sectoral challenges and actionable steps to establish robust data governance and privacy programs. The webcast also explored sector-specific impacts, from financial services and technology to manufacturing and consumer industries, enabling organizations to transition from compliance to building trust and competitive advantage in India’s evolving privacy era.

Topics discussed include:

• Overview of the Digital Personal Data Protection Act, 2023 and upcoming Rules
• Key compliance obligations for data fiduciaries and significant data fiduciaries
• Roadmap to achieve readiness through structured privacy governance frameworks
• Sector-specific implications across financial services, GCCs, technology, and others
• Comparative insights on India’s DPDP Act with global privacy laws such as General Data Protection Regulation (GDPR) and California Privacy Rights Act (CPRA)
• Strategies to address implementation challenges around consent, data retention and cross-border transfers
• Leading practices for building a privacy-by-design culture and leveraging trust as a business differentiator
• Actionable steps to move from regulatory compliance to strategic data stewardship