India’s DPDP Act 2023 introduces strict consent, data retention and breach rules, forcing marketers to rethink how they collect, store and use consumer data.