NEW DELHI: India's Digital Personal Data Protection (DPDP) Act is no longer just a law on paper. With most of its provisions expected to come into force by May 2027, every company that collects or processes personal data—including startups—will have to comply with a new set of legal and technical obligations.