Section 5 Indian Data Protection Act 2019

Limitation on purpose of processing of personal data.

5. Every person processing personal data of a data principal shall process such personal data

(a) in a fair and reasonable manner and ensure the privacy of the data principal; and

(b) for the purpose consented to by the data principal or which is incidental to or connected with such purpose, and which the data principal would reasonably expect that such personal data shall be used for, having regard to the purpose, and in the context and circumstances in which the personal data was collected.