The draft Digital Private Data Protection (DPDP) rules are set to create a major compliance burden for technology startups, already reeling under a funding winter and narrowing business margins. Industry executives pointed out that a window of 48 hours for any platform to erase an inactive customer’s data is too short a duration and might need to be extended.
