What the DPDP Act requires
Accountability under the DPDP Act starts with knowing your data. A Record of Processing Activities (RoPA) — what personal data you hold, where, why, and where it flows, including cross-border — is the foundation every other obligation builds on.