Legal and policy experts have called for targeted assessments of corporate readiness for the Digital Personal Data Protection (DPDP) Act following recent cyber incidents in India, including disclosure of critical vulnerabilities in PHP, a programming language widely used to run websites.The incidents underline the need to identify gaps in companies’ security practices and clarify what constitutes reasonable safeguards before the law takes