While awaiting the promulgation of the new Digital Personal Data Protection Rules by the Ministry of Electronics and Information Technology to supplement the Digital Personal Data Protection Act, 2023 (DPDP Act), it is pertinent to understand the various facets of the DPDP Act that addresses the unauthorised use and mishandling of personal data and establishes a comprehensive framework for safeguarding individuals’ information in the digital realm.
The DPDP Act enforces strict security measures for the protection of personal data and establishes a regulatory body to ensure compliance and impose penalties for violations, aiming to strengthen privacy and security in the digital age while promoting innovation. By emphasising user consent, enhancing cybersecurity measures, and implementing a robust enforcement framework, the legislation aspires to strike a delicate equilibrium between promoting innovation and securing personal data.
This guidebook provides comprehensive answers to the most commonly asked questions relating to the DPDP Act, touching up the various aspects of the legislation, encompassing key definitions, the scope of the Act, rights and obligations of the data principals and data fiduciaries, exemptions stipulated under the Act, penalties involved, and much more.
Read the FAQs on The Digital Personal Data Protection Act, 2023 here >>