DPDP Act (India)
The Digital Personal Data Protection Act, 2023 provides for the processing of digital personal data in a manner that recognizes both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes.
Framework Requirements & Categories
Detailed breakdown of the highly precise, accurate control domains defined by DPDP Act (India).
Notice and Consent
A Data Fiduciary must give a clear and plain language notice to the Data Principal before seeking consent. Consent must be free, specific, informed, unconditional, and unambiguous.
Withdrawal of Consent
Data Principals have the right to withdraw consent at any time, with the ease of withdrawal being comparable to the ease with which consent was given.
Certain Legitimate Uses
Data can be processed without consent for certain legitimate uses (e.g., medical emergencies, employment purposes, state services).
Processing of Children's Data
Verifiable parental consent is required before processing personal data of a child. Tracking or behavioral monitoring of children is prohibited.