Section 4 Indian Data Protection Act 2019

Prohibition of processing of personal data.

4. No personal data shall be processed by any person, except for any specific, clear and lawful purpose.