DPDP & Blockchain - Case Study 3 - Kaveri's Story Her personal data crossed a border. No one told her. No Indian law channel was used. Kaveri's KYC sat on a consortium blockchain with an overseas node. A foreign regulator accessed it during an investigation. Under Rule 15 of the DPDP Rules, 2025, this is a direct violation. Foreign government access to Indian personal data must pass through prescribed legal channels — not consortium node access. The Puttaswamy judgment (2018) called informational self-determination a fundamental right. Blockchain amplifies the risk the Supreme Court described. Cross-border nodes must be governed before deployment. The compliance deadline is 13 May 2027.





















