Recently, the parliament enacted the DPDPA to secure the personal digital rights of individual (i.e., Data Principal)
Consent Management under the provisions of the Digital Personal Data Protection Act (DPDPA), 2023
Recently, the parliament enacted the DPDPA to secure the personal digital rights of individual (i.e., Data Principal). Under this Act, it is mandatory that before processing the personal data of an individual for a particular purpose, the service provider (i.e., Data Fiduciary, Consent Manager) adhere to the following:
- To establish the consent management processes for obtaining specific consent from the individual (data principal) before the processing of her personal data for specific purposes.
- It may be noted these statutory provisions give individuals more control over their personal data and how it is used by service providers.2 (It is pertinent to note that the consent management process is based on the general principle of consensus ad idem in the contract; otherwise, the said agreement/request would be treated as invalid)
- Established the consent manager, who is a single point person and registered with the Data Protection Board (i.e., Adjudicatory body under the Act), and who acts as a facilitator to enable data protection to give, manage, review, and withdraw consent through an accessible, interoperable platform.
- Under the Act, there is a mandate that consent obtained from data principal be subject to adherence to the following principles:
- The said consent should be free/unconditional.
- It shall be specific.
- It shall be unambiguous, with a clear affirmative. (It may be noted that these principles are also spirited by the general principles contract.)
- Every request for consent should be in clear and simple language, giving the data principal the option to access such a request in English or any other language specified in the Eighth Schedule of the Indian Constitution.
- The data principal has the right to give, manage, review, or withdraw her consent to the Data Fiduciary through the Consent Manager.
- The consent manager shall be accountable to the data principal and execute its statutory obligations as per the defined rule.
- It is also mandatory that the additional burden lie on the data fiduciary to prove that consent was obtained from the data principal as per the provisions of the Act.
The post-Covid era led to stark changes in every individual’s work-life balance. While adapting to the ‘new normal’, trends like Read more
The MRO Conference in Delhi emerges as a pivotal event in the realm of Maintenance, Repair, and Overhaul (MRO) within Read more
Governments often offer tax incentives in the form of reductions or breaks on income taxes for citizens who engage in Read more
Rong Thai International Group, a Thailand based manufacturer and distributor of footwear, initiated legal proceedings against ENA Footwear Pvt. Ltd. Read more
Coworking spaces have highly transformed the conventional work approach by offering them space, comfort, and flexibility. While maintaining hygiene and Read more
The Advertisement Standards Council of India (ASCI), established in 1985 under Section 25 of the Companies Act, 1956, is a Read more
Cybersecurity involves safeguarding internet-connected systems, including hardware, software, and data, from cyber threats. It is crucial Cybersecurity involves safeguarding internet-connected Read more
India's banking system is diverse and growing rapidly. It comprises commercial banks, insurance firms, non-banking financial institutions, unions India's banking Read more
Efficiency is paramount for the best law firms in today's fiercely competitive legal landscape. Technology empowers them to Efficiency is Read more
Sensitive Data Breach All confidential information stored and managed by an individual or organization, accessed only to authorized users with Read more
