The draft rules of the Digital Personal Data Protection (DPDP) Act stated that the Central government can restrict companies from transferring personal data to foreign nations, entities or persons. The rules also require companies to ensure algorithms used for processing data don't pose any risk to users. The draft rules are open for public feedback till February 18.