India's Personal Data Protection Act provides for certain situations where it is not mandatory to have secured an individual’s explicit consent before using that person’s personal data. While this means the administrative burden on businesses may be lighter, it also points to the need for their careful consideration before processing people’s personal data.
On 11 August India’s Parliament promulgated the Personal Data Protection Act, known as the ‘Data Bill,’ thereby closing the legislative gap that existed vis-à-vis Europe’s General Data Protection Regulation (GDPR). Data protection legislation has been long overdue in a country where almost a billion people operate online. The Data Bill stipulates that personal data may only be processed for lawful purposes and after having secured the consent of the individual concerned.
Do you have information to share with us?
Article authors
Carole Dieterich
Freelance