Long awaited Digital Personal Data Protection Bill passed by Parliament
The Rajya Sabha passed the Digital Personal Data Protection Bill, 2023 on 9th August, 2023. It was already approved by Lok Sabha on August 07, 2023.
The Bill provides for the processing of digital personal data of individuals, thus recognizing the right of the individuals to protect their personal data for lawful purposes.
It applies to the processing of digital personal data within the territory of India or processing of digital personal data outside the territory of India, if such processing is in connection with any activity related to offering of goods or services to Data Principals (i.e. whose data is collected) in the territory of India. The Bill is based on the following seven principles:
- The principle of consented, lawful and transparent use of personal data (obtaining consent of the Data Principal i.e. whose data is collected);
- The principle of purpose limitation (use of personal data only for the purpose specified at the time of obtaining consent of the Data Principal);
- The principle of data minimization (collection of only as much personal data as is necessary to serve the specified purpose);
- The principle of data accuracy (ensuring data is correct and updated);
- The principle of storage limitation (storing data only till it is needed for the specified purpose);
- The principle of reasonable security safeguards; and
- The principle of accountability (through adjudication of data breaches and breaches of the provisions of the Bill and imposition of penalties for the breaches).
Exemplary Penalties are provided in the bill for up to Rs. 250 crores for and for failure to take security measures to prevent data breaches.
The Bill is expected to soon become a law now after receiving assent of the President of India.
Get Compliances under the Digital Personal Digital Protection Bill and 2000+ Laws in India on Complinity Compliance Software.