Summary: This article is the second part of a two-part series, examining the implications of India's Digital Personal Data Protection Rules, 2025, on internal investigations conducted by organisations and their legal counsel.