The Digital Personal Data Protection (DPDP) Act-2023 received Presidential assent on August 11th (Friday), 2023 bringing India into the comity of other Nations having a robust personal data protection regime. The law is now in force and Government will soon constitute the Data Protection Board to work out subordinate legislations. This law fundamentally alters the way personal data is handled between different Data Fiduciaries (the entities that hold personal data) and Data Principals. These fiduciaries could be from the corporate sector, NGOs, Government or any other entity dealing with personal data. There are many nuances and complexities in this Act and heavy penalties of upto Rs 250/- crores are mandated for violations. Corporate India needs to make changes in people, process and technology to comply with this law after a thorough assessment of its “as-is” state and a transition to the “to-be” state.