Step 8 of DPDPA compliance is implementing minimum security safeguards under Section 8 and Rule 6—covering encryption, masking, tokenization, access controls, MFA, logging, backups, and business continuity planning.
Rule 6 mandates technical and organizational measures, including unique accounts, role-based access, full-disk encryption, encrypted backups, and log retention for at least one year.