India's data protection law creates one set of rules for businesses and another for the state.