India's DPDP Act doesn't replace RBI's KYC Master Directions it runs alongside them, with a different legal basis, different retention logic, and its own penalties. Here's what that means for a fintech's KYC stack, mapped to the controls that actually satisfy it. Most fintechs operating in India built their KYC stack around one rulebook: RBI's KYC Master Directions collect documents, verify identity, retain records for years, done. The Digital Personal Data Protection Act 2023 doesn't repla...