Can India’s DPDP framework keep up with the rise of autonomous AI?

Enterprises are moving from generative AI assistants that answer prompts to autonomous agents that retrieve data, call tools across systems and act with limited human oversight. The Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025 are technology-neutral, which is largely a strength. The harder question is operational: when an agent decides at runtime what data to fetch, combine or infer, can a Data Fiduciary still demonstrate purpose limitation, valid consent and accoun