What the DPDP Act requires
Section 8 requires reasonable security safeguards to protect personal data and prevent breaches. For sensitive identifiers — Aadhaar, PAN, financial, health, biometric — that means field-level encryption, masking, and tight, logged access.
Storing sensitive IDs in plain columns is the single most common DPDP risk. The Vault removes it.