Key Provisions
A comprehensive overview of the major provisions within the Digital Personal Data Protection Act, 2023 - covering definitions, rights, obligations, consent framework, legitimate uses, exemptions, and penalties.
Foundational terms - Data Principal, Data Fiduciary, personal data, and processing.
What qualifies as personal data, the digital-only scope, and identifiability tests.
Access, correction, erasure, grievance redressal, and nomination rights.
Purpose limitation, security safeguards, breach notification, and retention.
The Processor's role, contractual framework, and comparison with GDPR.
Valid consent requirements, notices, withdrawal, and granularity.
Registration, obligations, interoperability, and practical use cases.
Processing without consent - employment, State functions, emergencies, public interest.
Verifiable parental consent, tracking prohibitions, and age verification.
The negative list approach, R.15 committee, and GDPR comparison.
Sovereignty, law enforcement, research, public data, and government instrumentalities.
Civil penalty schedule, determination factors, and global comparison.
Designation criteria, DPO, DPIA, and independent audit requirements.
Disclaimer: The information on this page is for educational purposes only and does not constitute legal advice or solicitation.