DPDPA
DPDPA
    • 1. Title
    • 2. Definitions
    • 3. Application of Act
    • 4. Grounds for processing personal data
    • 5. Notice
    • 6. Consent
    • 7. Certain legitimate uses
    • 8. General obligations of Data Fiduciary
    • 9. Processing of personal data of children
    • 10. Additional obligations of Significant Data Fiduciary
    • 11. Right to access information about personal data
    • 12. Right to correction and erasure of personal data
    • 13. Right of grievance redressal
    • 14. Right to nominate
    • 15. Duties of Data Principal
    • 16. Processing of personal data outside India
    • 17. Exemptions
    • 18. Establishment of Board
    • 19. Composition and qualifications for appointment of Chairperson and Members
    • 20. Salary, allowances payable to and term of office
    • 21. Disqualifications for appointment and continuation as Chairperson and Members of Board
    • 22. Resignation by Members and filling of vacancy
    • 23. Proceedings of Board
    • 24. Officers and employees of Board
    • 25. Members and officers to be public servants
    • 26. Powers of Chairperson
    • 27. Powers and functions of Board
    • 28. Procedure to be followed by Board
    • 29. Appeal to Appellate Tribunal
    • 30. Orders passed by Appellate Tribunal to be executable as decree
    • 31. Alternate dispute resolution
    • 32. Voluntary undertaking
    • 33. Penalties
    • 34. Crediting sums realised by way of penalties to Consolidated Fund of India
    • 35. Protection of action taken in good faith
    • 36. Power to call for information
    • 37. Power of Central Government to issue directions
    • 38. Consistency with other laws
    • 39. Bar of jurisdiction
    • 40. Power to make rules
    • 41. Laying of rules and certain notifications
    • 42. Power to amend Schedule
    • 43. Power to remove difficulties
    • 44. Amendments to certain Acts

4. Grounds for processing personal data

(1) A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose—

  • (a) for which the Data Principal has given her consent; or
  • (b) for certain legitimate uses.

(2) For the purposes of this section, the expression “lawful purpose” means any purpose which is not expressly forbidden by law.

Preliminary3. Application of Act
Data Fiduciary5. Notice

DPDPA.net