Incidents like these highlight the urgency of implementing at the earliest, the Digital Data Protection Regime in India which was enacted last year in 2023 to address such lacunas. For two consecutive years, the bank was assessed to be deficient in its IT Risk and Information Security Governance.