India's Digital Personal Data Protection (DPDP) Act provides necessary data protections but fails to prevent state privacy breaches. The Act allows broad exceptions for state and employer data processing, raising concerns of accountability and potential misuse while attempting to balance privacy with security needs.
