India's new Digital Personal Data Protection (DPDP) Rules are causing significant concern among startups due to high compliance costs and stringent demands, such as 48-hour breach reporting and year-long data logs. Penalties can reach INR 250 crore, and the rules apply equally to small businesses and large corporations, raising fears of jeopardized survival. Experts also point to increased government access to data, potentially weakening corporate refusal grounds.