The long-awaited Digital Personal Data Protection (DPDP) Rules 2025 have finally landed, introducing the “SARAL” framework—a simplified compliance path specifically designed for startups. However, simplicity should not be mistaken for leniency. With the formal notification of the Data Protection Board, the 18-month countdown for full compliance has officially begun. The core of the new regime…