• Shivam Maurya
• August 06, 2024
• No Comments

 The DPDP Act 2023 is a major piece of legislation for the regulation of protecting people’s personal data. Said act presents principles and requirements concerning the collection, storage and processing of information as well as rules to be followed.

 Objectives of Section 7 of DPDP Act 2023

 The DPDP Act 2023, Which is a piece of legislation, was created to guard the right of an individual to be left alone as well as to promote proper handling of data by organizations.

•  Data Collection Transparency: There is also a prerequisite that organizations have to explain the reasons for collecting data to individuals.
•  Consent Requirements: It is mandatory that we only gather the personal data of individuals with their permission.
•  Data Minimization: Collection of data should be concise, it should not be voluminous, rather stringent in terms of the data that is collected.
•  Purpose Limitation: Data collected for one analysis should not be used for other purposes not mentioned at the time of analysis.
•  Data Retention: The retention period of personal data should not be more than is required.
•  Security Measures: There has to be a sufficient measure of security to prevent unauthorized access to the data.

  Rights of Individuals

 The act provides several rights to people regarding their data.

•  Right to Access: The ability of an individual to demand for their records held by an organization is a capacity granted by the law.
•  Right to Correction: People have the right to update their data, or rather represent a request to correct certain information that the user considers to be inaccurate.
•  Right to Erasure: Personal data of a person can be removed by the person on his or her own volition in some circumstances.
•  Right to Data Portability: A user has the option to switch from one service provider to another with their data.
•  Right to Object: People can issue the use of their information for circulation and analysis.

 Obligations of Data Controllers

 Any organization that processes personal data has laid down responsibilities under the act.

•  Accountability: Any organization has to ensure that and be responsible for compliance with the data protection principles.
•  Data Protection Officers: The organizations have to nominate the Data Protection Officers to ensure compliance.
• Data Breach Notification: It is required by law that organizations have to inform authorities and those who are affected with the breach of their data.
•  Impact Assessments: Since high risk processing activities should be identified and risk mitigation measures put in place executive bodies should implement data protection impact assessments.
•  Record Keeping: It will be necessary for every organization to keep records on data processing activities.

 Penalties for Non-Compliance

In order to eliminate the issue, the DPDP Act 2023 has incorporated very heavy penalties in case of violation of these provisions.

• Fines: There are legal consequences that accompany the violation of the act and organizations could be liable to paying massive fines.
• Suspension of Operations: In the extreme situation there can be a blockage of the activity of non-compliant organizations.
•  Criminal Charges: The conclusive breaches are severe and can result in criminal charges of parties responsible for the action.

 The Digital Personal Data Protection Act 2023 is signifying pioneer initiative to attain better data protection and security in the modern world. According to Essential InfoSec it is crucial to abide by these regulations in order to safeguard personal information and with the trust of stakeholders. When an organization complies with the provisions of the DPDP Act, then they’ll effectively be dealing with personal data in a rightful manner.