DPDP and Cybersecurity: Why the Safest Data May Be the Data You Delete

This article argues that India’s DPDP regulatory regime reframes privacy requirements as cybersecurity imperatives: data minimization reduces breach impact, improves visibility, and enforces cross-functional accountability. It highlights rising cyber incidents and penalties, warns against data hoarding and unnecessary retention, and recommends purpose-bound collection, sharper fraud controls, and coordinated privacy-security governance to reduce organizational risk.