The DPDP Act had been officially notified over two years ago, following more than a decade of debate, judgements and legislation on how to protect the privacy and data of users while the draft set of rules were released in January.