​Bank CEOs are tapping top legal minds, alerting their compliance teams, and discussing with each other to spot the pitfalls of the Digital Personal Data Protection Act (DPDPA) - a statute under which hundreds of crores of fines can be imposed on organisations for breaches. The law that came into existence this year lays down that data can be collected only to the extent it is required, used only for the purpose for which it is taken and cannot be held on to beyond a point.