The DPDP Act marks a significant milestone toward protecting individual privacy. Still, the current practice of behavioral profiling and cross-platform tracking by digital powerhouses uplifts some important questions on the DPDP Act’s compliance with free consent and purpose limitation.