DPDP Act mandates legal handling of Indians’ data

The recent approval of the Digital Personal Data Protection Act (DPDP Act) by Parliament means digital firms will be legally obliged to handle Indian citizens’ data responsibly, asserted Union Minister of State for Electronics and Information Technology, Rajeev Chandrasekhar.
Labelling the act as a pivotal progression in the cyber law framework, Chandrasekhar highlighted that non-compliance could lead to significant penalties and, in extreme cases, prevent companies from functioning within India’s borders. This landmark legislation comes as part of Prime Minister Narendra Modi’s ambition to establish India as a leader in the global cyber law space, aiming for a trillion-dollar digital economy in the upcoming “Techade” – a decade dedicated to technological advancement.
Chandrasekhar emphasised the all-encompassing nature of the DPDP Act, stating it mandates both domestic and international entities, regardless of size, to safeguard the personal data of Indian citizens under strict legal parameters. He cautioned, “Companies that fail to adhere to these regulations face hefty penalties, and repeat offenders risk operational bans in India.”
Furthermore, Chandrasekhar expressed confidence that the DPDP Act will curb the misappropriation and exploitation of individual data by some businesses. He anticipates a significant shift in the operational behaviour of digital platforms dealing with Indian users and their data.