India's data protection law has taken years to arrive, but questions remain about its enforcement. The regulator's independence — or the lack of it — is the elephant in the room.
For any data protection framework to work, the enforcement agency must have both the powers and the political independence to act against violators, regardless of their size or influence.