Ask most compliance teams where their risk evidence lives and the honest answer is “in a lot of spreadsheets.” That answer is about to get expensive. On 13 May 2027, the core obligations of India’s Digital Personal Data Protection Rules become enforceable, with penalties of up to ₹250 crore. Banks and NBFCs already operate under...