How the Data Protection Act Will Impact You, Personally

After years of deliberations and several drafts, a comprehensive digital personal data protection law is closer to reality.

- Rakesh Kumar @New Delhi

The Ministry of Electronics and Information Technology released its regulations on the draft of the Digital Personal Data Protection Rules on January 5. The Act, which outlines how companies and government agencies should handle digital personal data, is open for consultation until February 18.

The Act was first introduced in the Lok Sabha on August 3, 2023, and was passed in the Lower House on August 7. It was then introduced in the Rajya Sabha on August 9 and passed the same day. It became the Digital Personal Data Protection (DPDP) Act, 2023, following the President's approval on August 11. The DPDP Act applies only to data processed digitally and does not apply to analogue data processing.

Why do we need a data protection law? Over the past decade, India has experienced exponential growth in digital adoption, with millions of people relying on online services and social media platforms for various aspects of their lives. The absence of a comprehensive data protection law in India has left citizens vulnerable to data breaches, identity theft, and other forms of cyber exploitation. The DPDP Act 2023 aims to address these concerns by providing a clear framework for data protection. It ensures that companies obtain permission before collecting and using personal data. It also mandates that they collect only the data necessary for their operations and take adequate measures to keep personal data safe and secure.