India's Digital Personal Data Protection Act, 2023 (DPDPA), marks a pivotal shift in data privacy, introducing a consent-centric framework and extraterritorial reach. Enacted in August 2023, with draft rules issued in January 2025, it aligns India with global standards like GDPR. Key features include stringent rules for children's data, cross-border transfer "blacklisting," and mandatory data breach notifications.

Without structural reform, India’s environmental laws will continue to be band-aids on systemic wounds.