With the development of technology at an unprecedented rate, the Digital Personal Data Protection Act (DPDPA) marks a necessary advancement in technology and data privacy laws in India. However, the DPDPA is lean, covering only the substantive requirements, with significant details e.g., restriction on cross-border transfers, details surrounding a data breach notice, and time period for grievance redressal, being left open to rule making. For now, it seems that the law will evolve further only after additional rules are officially notified.