Consent necessary for processing of personal data. 11. (1) The personal data shall not be processed, except on the consent given by the data principal at the commencement of its processing. (2) The consent of the data principal shall not …
Accountability of data fiduciary. 10. The data fiduciary shall be responsible for complying with the provisions of this Act in respect of any processing undertaken by it or on its behalf.
Restriction on retention of personal data. 9. (1) The data fiduciary shall not retain any personal data beyond the period necessary to satisfy the purpose for which it is processed and shall delete the personal data at the end of …
Quality of personal data processed. 8. (1) The data fiduciary shall take necessary steps to ensure that the personal data processed is complete, accurate, not misleading and updated, having regard to the purpose for which it is processed. (2) While …
Requirement of notice for collection or processing of personal data. 7. (1) Every data fiduciary shall give to the data principal a notice, at the time of collection of the personal data, or if the data is not collected from …
Limitation on collection of personal data. 6. The personal data shall be collected only to the extent that is necessary for the purposes of processing of such personal data.
Limitation on purpose of processing of personal data. 5. Every person processing personal data of a data principal shall process such personal data (a) in a fair and reasonable manner and ensure the privacy of the data principal; and (b) …
Prohibition of processing of personal data. 4. No personal data shall be processed by any person, except for any specific, clear and lawful purpose.
Definitions 3. In this Act, unless the context otherwise requires, (1) “Adjudicating Officer” means the Adjudicating Officer appointed as such under sub-section (1) of section 62; (2) “anonymisation” in relation to personal data, means such irreversible process of transforming or …
Section 2 Indian Data Protection Act 2019 Application of Act to processing of personal data 2. The provisions of this Act, (A) shall apply to (a) the processing of personal data where such data has been collected, disclosed, shared …