Key Takeaways
- The President Droupadi Murmu granted assent to the DPDP Bill 2023, marking a milestone in India’s data privacy law.
- The DPDP Bill establishes a Data Protection Board to investigate personal data breaches and impose penalties.
- Under the Bill, individuals gain rights to correction, completion, updating, and erasure of their personal data.
New Delhi: President Droupadi Murmu on Saturday granted assent to the Digital Personal Data Protection Bill, 2023 (DPDP Bill) after it was passed by both the houses of Parliament.
The DPDP bill was passed unanimously by the Rajya Sabha on Wednesday (August 9) while
the Lok Sabha passed the bill on Monday (August 7) by voice-vote.
The Bill aims to manage digital personal data by balancing individuals’ right to safeguard their data.
It also permits the need to lawfully process such data for relevant purposes.
According to the Bill, a person may process the personal data of an individual for a lawful purpose on the basis of their consent and for certain legitimate uses. The Bill has a provision to set up the Data Protection Board of India.
The Board on receipt of an intimation of a personal data breach will inquire into the matter and impose penalty.
While determining the amount of monetary penalty to be imposed, the Board will consider the nature, gravity and duration of the breach and the type, and nature of the personal data affected by the breach.
The Bill states that individuals have the right to correction, completion, updating and erasure of their personal data of which they have previously given consent.
Earlier, the Electronics and Information Technology Minister Ashwini Vaishnaw said, the legislation is intended to protect the digital personal data of 140 crore Indians.
“Around 90 crore people of India are connected with the internet and this bill has been brought for the protection of security and privacy of the people in this digital world” he said while participating in the discussion in Lok Sabha
