A step forward, but not without concerns

The draft rules of the data protection law, if retained as is, could present hurdles for implementation, require businesses to make expensive adjustments

- Arun Prabhu Arya Tripathi

While this emphasis on itemised details may help transparency and accountability, it will mean that businesses have to satisfy a demanding, rigid, and expensive consent regime. Given this background, entities may be well advised to examine their existing notices, grievance redress and data principal right mechanisms to meet timelines for implementation.