DPDPA vs GDPR – Comparative Analysis of Understanding the Lawfulness of Processing

In the complex world of data protection and privacy laws, understanding the principles that govern the lawfulness of processing personal data is crucial for compliance and ethical management of information. This blog provides a detailed comparison between the European Union’s General Data Protection Regulation (GDPR) and India’s Data Protection and Digital Personal Data Protection Act … Read more

THE DIGITAL PERSONAL DATA PROTECTION BILL is here!

THE DIGITAL PERSONAL DATA PROTECTION BILL is here!

Forthcoming Digital Personal Data Protection Bill, 2023 incorporates several significant amendments aimed at enhancing data protection and privacy in the digital environment. As data experts, compliance experts, and cybersecurity professionals, it is crucial to be aware of these changes, as they will have a significant impact on data protection practices and compliance requirements. This article examines all … Read more

Vietnam: Official issuance of Vietnam Decree on Personal Data Protection (PDPD)

Vietnam personal data protection

Resolution 13/NQ-CP in 2023 approving the dossier to develop the Decree on Personal Data Protection issued by the Government Mirroring the EU’s General Data Protection Regulation in different aspects, the PDPD introduces various new requirements to any organizations/individuals engaging in and/ or related to personal data processing activities in Vietnam. Vietnam has issued its first … Read more

Vietnam’s Digital Personal Data Protection Bill (PDPL)

Vietnam's Digital Personal Data Protection Bill (PDPL)

Vietnam’s Digital Personal Data Protection Bill (PDPL) represents a pivotal step in safeguarding individuals’ privacy rights in the digital age. As the digital landscape evolves and technology becomes more integrated into everyday life, the need to regulate the collection, processing, and storage of personal data becomes increasingly imperative. The PDPL seeks to address these concerns … Read more

Obligations of Data Fiduciary under DPDPB, 2022

Obligations of Data Fiduciary under Digital Personal Data Protection Bill, 2022

Who is Data Fiduciary? A data fiduciary is any entity or individual that determines the purposes and means of processing personal data. Under the Digital Personal Data Protection Bill India, data fiduciaries are responsible for complying with the provisions of the law in respect of any processing undertaken by them or on their behalf by … Read more

Consent Manager Framework in DPDPB, India

Consent Manager Framework in Digital Personal Data Protection Bill (DPDPB), India

The Joint Parliamentary Committee submitted its report on the Digital Personal Data Protection Bill, recommending the inclusion of “consent managers” in the upcoming Data Protection Act. The bill defines consent managers as a “Data Fiduciary which enables a Data Principal to give, withdraw, review and manage his consent through an accessible, transparent and interoperable platform.” … Read more

Digital Personal Data Protection Bill (DPDPB): Chapter 2 – Deemed Consent

Points: Deemed consent can be useful in situations where obtaining explicit consent is impractical or impossible, such as when a data principal voluntarily provides personal data to a data fiduciary. This provision ensures that data fiduciaries can process personal data in certain circumstances without having to obtain explicit consent, which can save time and resources. … Read more

Digital Personal Data Protection Bill (DPDPB): Chapter 2 – Consent

7. Consent(1) Consent of the Data Principal means any freely given, specific, informed and unambiguous indication of the Data Principal’s wishes by which the Data Principal, by a clear affirmative action, signifies agreement to the processing of her personal data for the specified purpose. For the purpose of this sub-section, “specified purpose” means the purpose … Read more

Digital Personal Data Protection Bill (DPDPB): Chapter 2 – Grounds & Notice

5. Grounds for processing digital personal dataA person may process the personal data of a Data Principal only inaccordance with the provisions of this Act and Rules made thereunder, for alawful purpose for which the Data Principal has given or is deemed to havegiven her consent in accordance with the provisions of this Act.For the … Read more

Digital Personal Data Protection Bill (DPDPB): Chapter 1 – Interpretation 3

In this Act: –(1) unless the context otherwise requires, a reference to “provisions of this Act” shall be read as including a reference to Rules made under this Act. The first part of this section is stating that when the Act refers to “provisions of this Act,” it also includes any rules that are made … Read more