C O V E R S T O R Y
The Digital Personal Data Protection Bill , 2023
The Act provides for the processing of digital personal data in a manner that recognizes both the rights of the individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto .
The Digital Personal Data Protection Bill , 2023 protects digital personal data ( that is , the data by which a person may be identified ) by providing for the obligations of Data Fiduciaries ( that is , persons , companies and government entities who process data ) for data processing ( that is , collection , storage or any other operation on personal data ). It protects the rights and duties of Data Principals ( that is , the person to whom the data relates ); and there are financial penalties for breach of rights , duties and obligations .
The Act will introduce data protection law with minimum disruption while ensuring necessary change in the way
Data Fiduciaries process data . It will enhance the Ease of Living and the Ease of Doing Business ; and enable India ’ s digital economy and its innovation ecosystem .
The Act is based on the following seven principles . The principle of consented , lawful and transparent use of personal data ; The principle of purpose limitation ( use of personal data only for the purpose specified at the time of obtaining consent of the Data Principal ); The principle of data minimisation ( collection of only as much personal data as is necessary to serve the specified purpose ); The principle of data accuracy ( ensuring data is correct and updated ); The
20
BioVoiceNews | August 2023