If you run a small business, startup, or MSME in India and handle customer or employee data, there’s a new rulebook you cannot ignore — the Digital Personal Data Protection (DPDP) Rules, 2025. These rules are now law and spell out how personal data must be collected, used, stored, protected and eventually deleted. Wikipedia But