Ajay Kumar: Creating a new article

2023-08-10T08:48:42Z

Creating a new article

New page

{{Infobox legislation
| short_title = Digital Personal Data Protection Act, 2023
| legislature = Parliament of India
| territorial_extent = [[India]]
| enacted_by = Lok Sabha
| date_passed = 7 August 2023
| date_enacted = Rajya Sabha
| date_passed2 = 9 August 2023
| signed_by = [[President of India]]
| introduced_by = [[Ashwini Vaishnaw]]
{{small|Minister of Electronics and Information Technology, Minister of Communications, Minister of Railways}}
| 1st_reading = 3 August 2023
| keywords = Consent, Data privacy, Data breach
| status = not yet in force
}}

The '''Digital Personal Data Protection Act, 2023''' (also known as '''DPDP Act''' or '''DPDPA-2023''') is an act of the [[Parliament of India]] to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto.<ref name=":02">{{Cite web |title=The Digital Personal Data Protection Bill 2023 PDF |url=https://sansad.in/getFile/BillsTexts/LSBillTexts/Asintroduced/113_2023_LS_Eng83202330313PM.pdf?source=legislation}}</ref> This is the first Act of the Parliament of India where "she/her" pronouns were used unlike the usual "he/him" pronouns.<ref>{{Cite news |date=2022-11-18 |title=Draft data protection Bill uses ‘she’ and ‘her’ to refer to all individuals |language=en-IN |work=The Hindu |url=https://www.thehindu.com/news/national/draft-data-protection-bill-uses-she-and-her-to-refer-to-all-individuals/article66154970.ece |access-date=2023-08-09 |issn=0971-751X}}</ref>

The Minister of Electronics and Information Technology Ashwini Vaishnaw has informed that the [[Government of India|Central government]] is setting up the Data Protection Board of India which will be an independent body. It will monitor compliance and imposition of penalties, direct data fiduciaries to take necessary measures in the event of a data breach and hear grieevances made by affected persons.

== Background ==
On 24 August 2017, the Supreme Court of India gave the [[Right to Privacy verdict|Right to Privacy verdict.]] In the case of Justice K. S. Puttaswamy (Retd.) and Anr. vs Union Of India And Ors. the Supreme court held that the Right to Privacy is a [[Fundamental rights in India|fundamental right]] protected under Article 21 and Part III of the Indian Constitution.<ref>{{Cite web |title=Wayback Machine |url=https://web.archive.org/web/20170828075957/http://sci.gov.in/pdf/LU/ALL%20WP(C)%20No.494%20of%202012%20Right%20to%20Privacy.pdf |access-date=2023-08-09 |website=web.archive.org}}</ref>

== Summary ==

* The Digital Personal Data Protection Act frames out the rights and duties of the citizen (Digital Nagrik) on one hand and the obligations to use collected data lawfully of the Data Fiduciary on the other hand. The Act is based on the following principles around the Data Economy:
** The act will establish the comprehensive legal framework governing digital personal data protection in India. The act provides for the processing of digital personal data in a manner that recognizes the right of individuals to protect their personal data, societal rights and the need to process personal data for lawful purposes.<ref name=":02" />
* The bill was passed by [[Lok Sabha]] on 7 August 2023.<ref>{{Cite web |date=2023-08-07 |title=Data protection bill passed by Lok Sabha, next stop Rajya Sabha |url=https://www.moneycontrol.com/news/business/data-protection-bill-passed-by-lok-sabha-next-stop-rajya-sabha-11110631.html |access-date=2023-08-07 |website=Moneycontrol |language=en}}</ref>
* The bill was passed by [[Rajya Sabha]] on 9 August 2023.<ref>{{Cite web |last=Chishti |first=Aiman J. |date=2023-08-09 |title=Parliament Passes Digital Personal Data Protection Bill |url=https://www.livelaw.in/news-updates/parliament-passes-digital-data-protection-bill-personal-data-234823 |access-date=2023-08-09 |website=www.livelaw.in |language=en}}</ref>

== Provisions ==

*Right to access she/her personal data
*Right to correction and erasure
*Right to revoke consent
*Special provisions for the protection of data related minors (under 18 children)
*Minimum penalty for breach is 50 crore INR
*The terms and conditions and information related to collection of data should be made available in all the 22 languages in the 8th schedule of the Indian constitution
*Right to grievance redressal
*Right to nominate a consent manager to manage their data related requests on behalf of a data principle

== Exemptions<ref>{{Cite web |title=Digital Personal Data Protection Act 2023 TEXT |url=https://sansad.in/getFile/BillsTexts/LSBillTexts/Asintroduced/113_2023_LS_Eng83202330313PM.pdf?source=legislation}}</ref> ==
The Act has made exemptions from the regulations related to the Act, they are:

* The processing of personal data is necessary for enforcing any legal right or claim
* The processing of personal data by any court or tribunal or any other body in India which is entrusted by law with the performance of any judicial or quasi-judicial or regulatory or supervisory function, where such processing is necessary for the performance of such function
* Personal data is processed in the interest of prevention, detection, investigation or prosecution of any offence or contravention of any law for the time being in force in India
* Personal data of Data Principals not within the territory of India is processed pursuant to any contract entered into with any person outside the territory of India by any person based in India
* The processing is necessary for a scheme of compromise or arrangement or merger or amalgamation of two or more companies or a reconstruction by way of demerger or otherwise of a company, or transfer of undertaking of one or more company to another company, or involving division of one or more companies, approved by a court or tribunal or other authority competent to do so by any law for the time being in force
* The processing is for the purpose of ascertaining the financial information and assets and liabilities of any person who has defaulted in payment due on account of a loan or advance taken from a financial institution, subject to such processing being in accordance with the provisions regarding disclosure of information or data in any other law for the time being in force

== See also ==
* [[Personal Data Protection Bill, 2019]]
* [[Information privacy law]]
* UK [[Data Protection Act 2018]]
* EU [[General Data Protection Regulation]]
* UK [[Data Protection Act 1998]]
* [[Data security]]

== References ==
{{Reflist}}

[[Category:Proposed laws of India]]
[[Category:Data laws of Asia]]

Digital Personal Data Protection Act, 2023 - Revision history

Ajay Kumar: Creating a new article