Digital Personal Data Protection (DPDP) Act, 2023

1. DPDP Act allows the Central Government to exempt any government agency from the provisions of the Act and Exclusion of Non-Digital Data and SMEs

2. Absence of a Data Protection Authority (DPA)

3. Limited Scope of Application (especialy offline data)

4. Weak Provisions for Cross-Border Data Transfers

5. Ambiguity in Consent Requirements and Purpose

6. Limited User Rights and Lack of Grievance Redressal Mechanism

7. No Specific Guidelines on Data Breach Notifications and Lack of Clarity on Penalties

.