President Droupadi Murmu has given assent to the Digital Personal Data Protection Act 2023. The landmark legislation is designed to regulate the processing of personal data in the digital realm. It will come into effect upon a date to be duly notified by the Union Government.
This legislation introduces new regulations and amends existing legislation, including the Right to Information Act and the IT Act. At its core, the new Act focuses on the responsible processing of digital personal data to ensure that individuals’ rights are respected. Its key provisions include strict obligations for data fiduciaries or individuals, companies, and government bodies involved in data processing. It also includes safeguards and penalties to hold these entities accountable for any breaches of data rights, duties, and obligations.
There are additional measures for Significant Data Fiduciaries, such as appointing data auditors and conducting Data Protection Impact Assessments, to ensure a higher level of data protection.
According to a circular by the Ministry of Electronics & IT, the legislation is poised to establish a seamless transition to data protection regulations, enhance the quality of life and the business environment, and propel India’s digital economy and innovation ecosystem.
