Rules under India’s Digital Personal Data Protection Act have finally been notified. Many companies fear they’re nowhere close to compliant, but a simple three-step audit can reveal just how exposed their operations are and what they must do before the grace period runs out.