India has finalised and notified the DPDP Rules, which will operationalise the Digital Personal Data Protection Act, 2023. While the Act and its rules enable the central government to control cross-border personal data transfers, including blocking transfers to specific countries, they also raise questions about how these powers will interact with existing agreements, such as the Mutual Legal Assistance Treaty (MLAT), and laws like the US’s RISA Act.

Read more at Medianama