Business Impact Summary
These rules mandate appointment of a Data Protection Officer, localized consent mechanisms in 8 scheduled languages, and data breach notifications within 72 hours. For your SaaS business, this triggers mandatory re-architecture of consent flows and a new DPO role. Estimated compliance cost: ₹12–25L for mid-sized firms.
What You Should Do Now
1. Audit current consent collection against the draft Schedule I requirements. 2. Identify personal data of minors — heightened obligations apply. 3. Submit comments to MeitY before the 30-day window closes — Niti10 can draft this for you.