Regulated entities in GIFT City must submit their annual cyber security audit reports by 29 June 2026. The framework requires both reporting compliance and proportionate cyber risk management.
The DPDP Act 2023 and Rules 2025 overhaul personal data protection in India, introducing strict consent, retention, and security requirements for businesses.
