The Rajya Sabha passed the Digital Personal Data Protection Bill, 2023, it was already approved by Lok Sabha on August 07.

The aim of PDPB “is to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes.”

There is a provision in the Bill for creating the Data Protection Board of India (DPB), which will be the first regulatory body in India focused on protecting personal data privacy.

Salient Features of the Digital Personal Data Protection Bill, 2023
The Bill provides for the processing of digital personal data in a manner that recognizes both the rights of the individuals to protect their personal data and the need to process such personal data for lawful purposes and for matters connected therewith or incidental thereto.

Digital Personal Data Protection Bill, 2023 is based on the following seven principles:

• The principle of consented, lawful and transparent use of personal data;
• The principle of purpose limitation (use of personal data only for the purpose specified at the time of obtaining consent of the Data Principal);
• The principle of data minimisation (collection of only as much personal data as is necessary to serve the specified purpose);
• The principle of data accuracy (ensuring data is correct and updated);
• The principle of storage limitation (storing data only till it is needed for the specified purpose);
• The principle of reasonable security safeguards; and
• The principle of accountability (through adjudication of data breaches and breaches of the provisions of the Bill and imposition of penalties for the breaches).

Key Takeaways

• The bill envisages penalties of up to Rs 250 crore per instance in the case of a data breach 
• There is a provision in the Bill for creating the Data Protection Board of India (DPB), which will be the first regulatory body in India focused on protecting personal data privacy.