Beyond Compliance: How India’s DPDP Act Is Reshaping the Cyber Insurance Landscape

This article analyzes how India’s Digital Personal Data Protection (DPDP) Act reshapes organizational cyber risk and drives the evolution of cyber insurance, using illustrative cases of cloud misconfiguration data exposure, a healthcare/edtech ransomware event, and AI-enabled social engineering. It explains the expanding scope of cyber insurance to cover regulatory, legal, forensic, incident response, and PR costs; underscores the heightened vulnerability and low insurance adoption among SMEs/MSMEs; and highlights market trends such as higher policy limits, stricter underwriting tied to compliance readiness, and risk-based pricing, positioning cyber insurance as a strategic component of data protection and regulatory preparedness.