The new Digital Personal Data Protection Bill, 2022 released on Friday (November 18) is focused on personal data, as compared to an earlier unwieldy draft. The reworked version of the legislation incorporates hefty penalties for non-compliance, but which are capped without any link to the turnover of the entity in question. It has also relaxed rules on cross-border data flows that could bring relief to the big tech companies, alongside a provision for easier compliance requirements for start-ups. There could be two potentially significant red flags: a near blanket exemption for government agencies from complying with some of the more...