
Risk Transfer Is Not Risk Removal: Cyber Insurance in the Age of the DPDPA
Introduction As India’s data protection regime moves from legislation to enforcement, businesses are increasingly treating cyber insurance as a ready answer to their compliance worries. The Digital Personal Data Protection Act, 2023 (“DPDP Act”) became operational once the DPDP Rules were notified in November 2025, wit









