Digital Personal Data Protection Act
The Digital Personal Data Protection Act (DPDPA) is a proposed law in India that aims to regulate the collection, processing, and storage of personal data of individuals. It sets out rules for the handling of personal data, promotes transparency and accountability in data processing, and empowers individuals to control their data. The bill applies to all entities that handle personal data, including businesses and government agencies, and is designed to protect the privacy of individuals.
What Is DPDPA?
The Digital Personal Data Protection Act (DPDPA) of 2023 was enacted to address the growing digital economy, the Act regulates the processing of digital personal data and establishes mechanisms for enforcement and redressal in cases of violations. Key roles in data processing, such as Data Fiduciary (the entity determining the purpose and means of processing) and Data Processor (handling data on behalf of the fiduciary), are clearly defined to promote accountability. For more details, visit the official resource at DPDPA.
At its core, the DPDPA mandates that Data Fiduciaries obtain free, specific, informed, unconditional, and unambiguous consent from individuals (data principals) before collecting, storing, processing, or sharing their personal data.
To enforce compliance, the DPDPA establishes the Data Protection Board of India, which can impose penalties up to INR 250 crore for serious violations.
