Inc42’s report prominently highlighted Mishi Choudhary’s assessment of the DPDP Rules, noting her view that implementation will demand significant investment and restructuring from smaller companies that lack the resources of larger tech firms. She cautioned that aggressive breach-reporting timelines and forensic disclosure requirements are unrealistic without external tooling, placing early-stage startups at a structural disadvantage. Choudhary also warned that Rule 23 sharply expands government access to private databases, increasing both surveillance and business risks. Her inputs shaped the story’s core argument: the DPDP regime introduces compliance expectations that are far heavier on young companies than the law acknowledges.
Smaller Firms Will Need Substantial Restructuring: Deep Dive on DPDP Compliance Pressures
