In August 2023, the Indian Parliament passed the Digital Personal Data Protection Act (DPDPA). Data protection legislation is crucial for giving digital product consumers control over their data. These laws also play a critical role in cybersecurity by encouraging organisations to protect personal data through a system of penalties and remedies. However, implementing data protection laws has proven to be not so easy a task.