This is the second in a two-part series on health data protection law. The DPDPA was enacted in 2023 but is not yet in effect. It regulates personal data processing by data fiduciaries. These entities determine the purposes and means of processing personal data.