DPDPA compliance is a cloud config problem

A compliance lead told me last week: "We're buying a ₹40L DPDPA compliance tool. We'll be ready by deadline." I asked: "Do you know which S3 buckets contain user PII?" She didn't. Neither did the CTO. Here's the reality: DPDPA isn't a compliance-tool problem. It's a cloud-config problem wearing a legal costume. The 7 misconfigurations that cause DPDPA violations (and cost ₹2-10L to fix post-notice): S3 buckets with user data + public-read ACL RDS instances storing PII outside India without prope