Key Aspects of India's Digital Data Protection Act

The President of India has granted her assent to The Digital Personal Data Protection Bill, 2023 (‘Act’) on Friday, August 11, 2023. The Bill was passed unanimously by the Rajya Sabha on August 9 while the Lok Sabha passed the bill on August 7 by a voice-vote.

The Act aims to manage digital personal data by balancing individuals' right to safeguard their data with the need to lawfully process such data for relevant purposes. The Act applies to digital personal data processing in India, including online and digitized offline data. It extends to processing outside India for offering of goods or services to Data Principals in India.

In the attached Newsflash, we have tried to highlight the key aspects of the Act, reproduced certain important definitions and the way-forward for all of us since this is going to impact every individual in some or the other way; be it in the capacity of a Data Principal, whose data is being used and processed or be it the Data Fiduciary, who calls for the personal data of the individuals.