India's DPDP Act 2023 Explained — And How AI Handles Data Principal Requests at Scale

This post is for informational purposes only and does not constitute legal advice. The DPDP Act 2023 and its implementing Rules 2025 are relatively new - requirements may evolve through further notifications or guidance. Verify the current position with a qualified data protection lawyer before making compliance decisions. Your company just received this email: "I would like to know all personal data your organisation holds about me. This is a formal request under the DPDP Act." It lands in a shared privacy.com inbox. Someone reads it. Forwards it to legal. Legal forwards it to engineering.