Misuse of data for scams continues to be a major issue. The sale of personal information for Rs 150-Rs 300 by informants to call centres and telemarketing companies is widespread. The new Digital Personal Data Protection Act seeks to limit this unregulated data circulation, but experts suggest it may take two to three years for full compliance.