India’s Digital Personal Data Protection (DPDP) Act comes bearing a complex basket of gifts for international businesses, such as easing burdens around cross-border data transfers. But it leaves enough ambiguity for large penalties down the line.