Question 1

What is the Digital Personal Data Protection Act, 2023?

Accepted Answer

The Digital Personal Data Protection Act, 2023 is India's comprehensive data protection law that establishes a framework for processing personal data, balancing individual rights with the need for lawful processing.

Question 2

Who is a Data Principal?

Accepted Answer

A Data Principal is an individual whose personal data is being processed. They have rights to access, correct, erase, and port their data under the DPDP Act.

Question 3

Who is a Data Fiduciary?

Accepted Answer

A Data Fiduciary is an entity that determines the purpose and means of processing personal data. They have obligations under the DPDP Act, including notice, consent, and security.

Question 4

What are the penalties for non-compliance?

Accepted Answer

Non-compliance with the DPDP Act can lead to penalties up to ₹250 crore for the data fiduciary and up to ₹50 crore for the data processor.

Question 5

What is a Significant Data Fiduciary?

Accepted Answer

A Significant Data Fiduciary is an entity that processes a high volume of personal data or sensitive data. They have enhanced obligations under the DPDP Act.

Question 6

What is Data Protection Impact Assessment (DPIA)?

Accepted Answer

DPIA is a process to identify and mitigate risks associated with high-risk data processing activities. It is required for Significant Data Fiduciaries.

Question 7

What are the rights of data principals?

Accepted Answer

Data principals have the right to access, correct, erase, port their data, and the right to grievance redressal.

Question 8

How long should personal data be retained?

Accepted Answer

Personal data should be retained only for as long as necessary for the purpose for which it was collected, as per the storage limitation principle.

Frequently Asked Questions