Yes. The DPDP Act allows cross-border transfers of personal data except to countries the Central Government restricts by notification (Section 16). There is no general data localisation requirement, but the Rules allow the government to specify conditions for certain data of Significant Data Fiduciaries, and sector laws (for example RBI rules for payment data) may impose stricter localisation.