Data PrivacySeven Principles of the Digital Personal Data Protection Act,2023

Seven Principles of the Digital Personal Data Protection Act,2023

The Digital Personal Data Protection Act,2023 is founded on the strong Seven principals ,and shall be governing factor to drive the entire enactment and its implementation in India, as below:

First Principle – Lawful Usage

The usage of personal data by organisations must be done in a lawful manner, which should be prima facie fair and transparent to the Data Principals.

Second Principle – Purpose Limitation

The personal data be used only for the purpose for which it was collected at the first place. The specific purpose has dominant role in entire cycle of data processing.

Third Principle – Data Minimization

A care to be exercised to collect and process only those items of personal data which are actually are required for attaining the specified purpose for which the consent was taken from the Data Principal.

Fourth Principle – Accuracy of Personal Data

It is expected that every reasonable effort will be made to ensure that the personal data is accurate and kept up to date on any given point of time.

Fifth Principle – Storage Limitation

Under no circumstances, the personal data be stored perpetually by default and storage be limited to only such duration as is necessary for the specified purpose for which it was initially obtained under the consent of Data Principal.

Sixth Principle – Reasonable Safeguards

The Data collector cum processor has got to take every reasonable safeguards to prevent personal data breach so that the data is protected and privacy is intact; and

Seventh Principle – Accountability

The person who decides the purpose and means of processing personal data should be accountable for such processing.

To know more about the issues discussed above, You may please connect with dataprivacy@amlegals.com or mridusha.guha@amlegals.com.