The role of data in India’s increased GDP and economic growth has led to the enactment of the Digital Personal Data Protection (DPDP) Act, 2023. This legislation aims to safeguard citizen’s data, including cross-border sharing. But it presents a paradox by simplifying regulations, yet increasing businesses’ accountability and responsibility, particularly through Sections 8(7) and 8(8) which mandate the deletion of personal data either when the user withdraws consent or the purpose for which the data was collected is no longer relevant.