Consider the following pairs matching legal frameworks with their key features regarding personal data regulation in India:

Pairs

1. IT Act, 2000 and SPDI Rules, 2011 — Regulated cross-border transfer of 'sensitive personal data' subject to adequacy of protection at the recipient end and either contractual necessity or consent
2. Digital Personal Data Protection Act, 2023 — Succeeded the IT Act regime and introduced a phased implementation with certain consent and safety provisions becoming effective from 2027
3. IT Act, 2000 regime — Applied its data-protection rules equally to all personal data, including names, addresses, phone numbers, browsing history, and behavioural patterns