Rao, who served as the governor of RBI from 2008 to 2013, said CBDC also needs robust data protection laws.