Abstract
The Digital Personal Data Protection Act (DPDPA), 2023, is India’s most comprehensive attempt at regulating the collection, processing, and transfer of personal data. As data flows increasingly power the global digital economy, the question of how countries handle cross-border transfers becomes vital. India faces a dual imperative: safeguarding national security and digital sovereignty, while also fostering an ecosystem conducive to global trade and innovation. This paper analyzes how the DPDPA approaches transboundary data transfers, contrasts its mechanisms with the GDPR and CPRA, and evaluates whether the DPDPA can effectively balance the interests of national security, privacy rights, and global tech collaboration.
This is an Open Access article distributed under the terms of the Creative Commons Attribution–NonCommercial 4.0 International (CC BY-NC 4.0) (https://creativecommons.org/licenses/by-nc/4.0/), which permits remixing, adapting, and building upon the work for non-commercial use, provided the original work is properly cited.