Anshika Singh, Jindal Global Law School ABSTRACT The introduction of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) has been an important change in the Indian data governance system, especially regarding cross-border data transfers. Departing from previous proposals which mandate rigid data localization, the Act follows a much lenient, ‘negative list’ approach that permits the transfer of personal data out of India except to the jurisdictions identified by the Central Government....