The operative provisions of the Protection of Personal Information Act (2013) including restrictions on cross-border data transfers come into effect after a one-year grace period following proclamation No. R21 in 2019. Specifically, Section 72 expos…