The Digital Personal Data Protection Act, 2023 imposes obligations on data fiduciaries to process personal data only for lawful purposes with consent, and establishes a Data Protection Board for enforcement, balancing innovation with privacy rights.
- True
- False
Answer: True
DPDP Act, 2023 key features: (a) Scope: Applies to processing of digital personal data within India, and outside India if for offering goods/services to Indian individuals, (b) Principles: Lawful purpose, consent, data minimization, accuracy, storage limitation, security safeguards, (c) Individual rights: Access, correction, erasure, grievance redressal, right to nominate, (d) Institutional mechanism: Data Protection Board of India for adjudication, enforcement, penalties (up to ₹250 crore), (e) Exemptions: State functions (security, public order, research), personal/domestic use, (f) Balance: Enables digital innovation (e-governance, fintech, healthtech) while protecting privacy rights; implementation rules pending. Illustrates adaptive constitutionalism: applying enduring values (privacy, dignity) to emerging technological contexts.