𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐏𝐞𝐫𝐬𝐨𝐧𝐚𝐥 𝐃𝐚𝐭𝐚 𝐏𝐫𝐨𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐁𝐢𝐥𝐥 (𝐏𝐃𝐏𝐁), 𝟐𝟎𝟐𝟑, 𝐭𝐚𝐛𝐥𝐞𝐝 𝐢𝐧 𝐭𝐡𝐞 𝐈𝐧𝐝𝐢𝐚𝐧 𝐏𝐚𝐫𝐥𝐢𝐚𝐦𝐞𝐧𝐭

The Digital Personal Data Protection (DPDP) bill is a legislation outlining the rights, duties, and obligations of citizens and data fiduciaries regarding personal data use.

1. The DPDP bill, guided by six principles, governs lawful and purposeful data collection, minimization, protection, accuracy, and breach reporting.
2. It introduces laws for the transfer and storage of personal data abroad, with heightened penalties for infringements.
3. The bill mandates consent prior to personal data collection and penalizes failure to prevent breaches.
4. The legislation applies solely to digital personal data, excluding non-digital and non-personal data.
5. It permits cross-border data flows to specific areas, easing data localization mandates.
6. Data fiduciaries can retain personal data beyond its initial collection purpose for business needs.
7. The bill prescribes penalties of ₹200 crore for non-reporting of data breaches and up to ₹250 crores for inadequate security measures.
8. Non-compliance fines, determined by the Data Protection Board, can escalate up to ₹500 crores.
9. A new Data Protection Board will monitor compliance and impose penalties, whilst accepting voluntary commitments.

Please read the entire bill on my LinkedIn Post.