Question 1

Is the consent notice required to give contact details?

Accepted Answer

Yes. The notice must include the contact details of a Data Protection Officer or another person who can answer processing questions.

Question 2

What makes consent valid under Section 6 of the DPDP Act?

Accepted Answer

Consent must be free, specific, informed, unconditional and unambiguous, given through a clear affirmative action.

Question 3

Must a Data Fiduciary maintain data accuracy?

Accepted Answer

Yes. Where data is used to make a decision affecting the Data Principal or is shared, it must be complete, accurate and consistent.

Question 4

What is the right to correction and erasure?

Accepted Answer

A Data Principal can request correction, completion, updating and erasure of their personal data held by a Data Fiduciary.

Question 5

How are DPDP penalties determined by the Board?

Accepted Answer

Based on the nature, gravity and duration of the breach, the type and sensitivity of data, repetitive nature, and any gains made or losses avoided.

Question 6

What is data minimisation under the DPDP framework?

Accepted Answer

Collecting and processing only the personal data necessary for the specified purpose.

Question 7

Can the Government exempt certain agencies from the DPDP Act?

Accepted Answer

Yes. The Government may exempt certain instrumentalities of the State for reasons such as national security, sovereignty or public order, subject to procedure.

Question 8

Can a Data Principal find out with whom their data was shared?

Accepted Answer

Yes. They can request the identities of the Data Fiduciaries and processors with whom their personal data has been shared.

Question 9

What is a personal data breach under the DPDP framework?

Accepted Answer

Any unauthorised processing, disclosure, acquisition, sharing, loss or alteration of personal data that compromises its confidentiality, integrity or availability.

Question 10

Are startups given any relaxation under the DPDP Act?

Accepted Answer

The Government may notify certain Data Fiduciaries, including startups, for lighter obligations on notice and data retention.

Question 11

When must personal data be erased under the DPDP Act?

Accepted Answer

When the purpose is no longer being served and retention is not required by law, the data and references enabling identification must be erased.

Question 12

What is the purpose limitation principle?

Accepted Answer

Personal data may be processed only for the specific lawful purpose for which consent was given or the legitimate use applies.

Question 13

Can a Data Fiduciary engage a Data Processor freely?

Accepted Answer

Only under a valid contract. The Data Fiduciary remains accountable for compliance.

Question 14

Who is a Data Fiduciary under the DPDP Act?

Accepted Answer

Any person who, alone or together with others, determines the purpose and means of processing personal data.

Question 15

What is a Data Protection Impact Assessment (DPIA)?

Accepted Answer

A structured assessment of the rights of Data Principals and the risks posed by processing, required annually for Significant Data Fiduciaries.

Question 16

What user-count threshold triggers the 3-year retention rule for online gaming?

Accepted Answer

Fifty lakh (5 million) registered users in India.

Question 17

What is the penalty for non-fulfilment of additional SDF obligations?

Accepted Answer

Up to Rs 150 crore.

Question 18

Is verifiable parental consent mandatory for children's data?

Accepted Answer

Yes. A Data Fiduciary must obtain verifiable consent of a parent or lawful guardian before processing a child's personal data.

Question 19

What does Schedule I of the DPDP Rules cover?

Accepted Answer

The registration conditions and duties of Consent Managers, including net worth and audit-trail requirements.

Question 20

Does the Data Protection Board operate as a digital office?

Accepted Answer

Yes. The Board functions digitally; complaints can be filed and tracked online via a portal and mobile app.

DPDP Act 2025 Knowledge Base

Latest Updates