DPDP’s Significant Data Fiduciary Designation Is the Sleeping Compliance Obligation for India’s GCCs
Global Capability Centres (GCCs) in India have spent the last year preparing for the Digital Personal Data Protection Act, 2023 (“DPDP Act”). Privacy notices have been updated, vendor agreements revisited, cross-border data flows mapped, and internal policies refreshed. Yet, one of the Act’s most consequential compliance obligations has received comparatively little attention: the possibility of […]