GS-III: Economy, Environment, S&T
Digital Personal Data Protection Act
Not met yet — counts as met once you answer a question on it.
Refers to the 2023 Act and the regime it creates for processing personal data in digital form — the data fiduciary and the data principal, consent as the primary ground for processing with a closed list of legitimate uses alongside it, purpose and storage limitation, and the rights of access, correction, erasure, grievance redressal and nomination. It covers the Data Protection Board of India as the adjudicating body, the additional obligations placed on significant data fiduciaries including impact assessment, independent audit and cross-border transfer permitted except to countries the Centre notifies against. Wide State exemptions and the Board's structural independence remain standing criticisms.