The operationalization of the Digital Personal Data Protection (DPDP) Act has fundamentally rewritten the rules of engagement for businesses operating in India. In this new era, the Data Principal (the individual) holds the reins, possessing granular control over their personal information. Central to this empowerment is the Data Subject Access Request (DSAR)—a formal mechanism that forces companies to answer the critical questions: "What data are you holding, and how are you using it?"
F ...