India's DPDP (Digital Personal Data Protection) Act and newly notified Rules 2025 mark a major shift from bulk data collection to consent-driven, accountable digital practices. Experts say the law empowers citizens with rights to control, correct and erase their data, while industries must redesign consent systems. However, concerns remain about limited rights and broad government exemptions.