• Flat No-1502, TOWER-D, Emaar Palm Heights, Sector 77, Gurugram, Haryana 122004

• info@varalegal.com

• +91-9821127838

Facebook Twitter Linkedin-in Youtube Instagram

1. What is the Digital Personal Data Protection Act, 2023?

The Digital Personal Data Protection Act, 2023 is India’s primary law governing the processing of digital personal data. It lays down obligations for organizations handling personal data and grants rights to individuals whose data is being processed.

2. When does the DPDP Act apply?

The Act applies when:

• Personal data is collected in digital form; or
• Personal data is collected offline and later digitized.

It applies to processing within India and also outside India if goods or services are offered to individuals in India.

3. What is “personal data” under the DPDP Act?

Personal data means any data about an individual who is identifiable by or in relation to such data.

Examples may include:

• Name
• Mobile number
• Email address
• Aadhaar details
• IP address
• Health information
• Financial details

4. Is consent mandatory under the DPDP Act?

Consent is one of the lawful grounds for processing personal data. Consent must be:

• Free
• Specific
• Informed
• Unconditional
• Unambiguous
• Given through clear affirmative action

5. What rights do individuals have under the DPDP Act?

Data Principals have rights including:

• Right to access information about personal data
• Right to correction and erasure
• Right to grievance redressal
• Right to nominate another person in certain cases

6. Can a person withdraw consent?

Yes. A Data Principal has the right to withdraw consent at any time. The withdrawal process should be as easy as giving consent.

7.Can personal data be transferred outside India?

Cross-border transfer of personal data is permitted except to countries that may be specifically restricted by the Central Government.

Disclaimer

These FAQs are for general informational purposes only and do not constitute legal advice. The applicability of the Digital Personal Data Protection Act, 2023 depends on specific facts, business models, and regulatory developments. Organizations should seek professional legal advice for compliance assessment.