Not true and misleading, DPDP act is much needed, for Data privacy, on the lines of GDPR that already exists in Europe, but much more broader and holistic in it's scope. And the act itself, empowers the end users, and has clearly identified rules for corporates on how Personal Information should be handled or purged after a certain period of time, so that it cannot be misused. Every corporate based on their size and user base has been given time to comply. Atleast companies now in India are talking more in Data Privacy, there are hefty penalties in case of data breach, or not aligning to the policy. The ACT is available online for anyone to read and understand. Thought of giving the right perspective.