A data fiduciary in India proposes to TRANSFER personal data to a foreign country for processing. Under the Digital Personal Data Protection Act, 2023, such cross-border transfer:

Section 16 of the DPDP Act, 2023 provides for CROSS-BORDER TRANSFER of personal data: the Central Government may, after an assessment, NOTIFY countries or territories to which personal data may be transferred, and may prescribe the terms and conditions/obligations of the data fiduciary for such outward transfer. A transfer otherwise than to a notified destination, or not in compliance with the prescribed terms, is impermissible. This reflects the Act's calibrated, sovereign approach to data localisation - not an outright ban, but a regulated, notification-based permission system. The notification-based mechanism is a defining, contemporary feature.