Privacy Law at India

10 Apr 2025 --
0 Comments

India's data protection landscape has undergone significant transformation with the enactment of the Digital Personal Data Protection Act, 2023 (DPDP Act). This legislation establishes a comprehensive framework for the processing of digital personal data, aligning with global privacy standards and reinforcing the fundamental right to privacy.

🇮🇳 Key Provisions of the DPDP Act, 2023

1. **Consent-Based Data Processing*

The DPDP Act mandates that personal data processing must be based on explicit consent from the data principal (individual. Data fiduciaries (entities processing data) are required t: Obtain consent in clear and plain languag Allow easy withdrawal of consen.Provide information on how to lodge complaints with the Data Protection Board of Indi.

2. **Rights of Data Principals*

Individuals are granted the following right:

Right to Access Obtain confirmation of data processing and access to personal dat.

Right to Correction Request rectification of inaccurate or incomplete dat.

Right to Erasure Request deletion of data when it's no longer necessary or if consent is withdraw.

Right to Data Portability Transfer data to another service provide.

Right to Object Object to data processing under certain condition.

3. **Data Protection Board of India*

The Act establishes the Data Protection Board of India, an adjudicatory body responsible for addressing grievances related to data processing violation. It adjudicates disputes between data principals and data fiduciaries, ensuring accountability and transparenc.

4. **Data Localization and Transfer*

The DPDP Act introduces provisions requiring certain categories of personal data to be stored and processed within Indi. This data localization requirement aims to enhance data security and sovereignty, though it has raised concerns among global tech companies regarding compliance and operational challengs

5. **Implementation Timeline*

While the DPDP Act received presidential assent in August 2023, its provisions are being implemented in phase. The government anticipates full enforcement within 6 to 10 months from the assent date, contingent upon the issuance of necessary notifications and the establishment of the Data Protection Boad

⚖️ Enforcement and PenaltiesNon-compliance with the DPDP Act can result i:

Monetary Penalties Fines for violations of data protection obligation.

Operational Restrictions Suspension or prohibition of data processing activitie.

Legal Actions Lawsuits initiated by affected individuals or entitie. The establishment of the Data Protection Board is expected to facilitate efficient dispute resolution and enforcement of the Act's provision.🧭 Summar

India's Digital Personal Data Protection Act, 2023 represents a significant step toward safeguarding individuals' digital privacy righs By instituting a consent-based framework, empowering data principals, and establishing a dedicated adjudicatory body, the Act aligns with international privacy standards and addresses emerging challenges in the digital ae As the implementation progresses, stakeholders are encouraged to stay informed and ensure compliance with the evolving data protection landscae.