Cabinet Approves Digital Personal Data Protection Bill

A
admin

Jul 8, 2023

  • 3 min Read
  • Shares
Cabinet Approves Digital Personal Data Protection Bill
The Union Cabinet of India has approved the draft of the Digital Personal Data Protection (DPDP) Bill 2023. The bill is likely to be tabled in the upcoming monsoon session of Parliament, which begins on July 20. The DPDP Bill is a comprehensive piece of legislation that seeks to protect the personal data of individuals in India. The bill defines personal data as any information that can be used to identify an individual, either directly or indirectly. It also sets out the rules for how personal data can be collected, used, and shared.
The bill includes a number of provisions that are designed to protect the privacy of individuals. For example, it gives individuals the right to access their personal data, the right to correct their personal data, and the right to object to the processing of their personal data. The bill also includes provisions for data portability and for the establishment of a Data Protection Authority.
The DPDP Bill is a significant step forward for data protection in India. It is the first comprehensive data protection law in India, and it is based on international best practices. The bill is likely to have a significant impact on the way that personal data is handled in India.
Key highlights of the DPDP Bill:
  • The bill defines personal data as any information that can be used to identify an individual, either directly or indirectly.
  • The bill sets out the rules for how personal data can be collected, used, and shared.
  • The bill gives individuals the right to access their personal data, the right to correct their personal data, and the right to object to the processing of their personal data.
  • The bill includes provisions for data portability and for the establishment of a Data Protection Authority.
  • All online and offline data will fall under the legal domains of this bill.
  • The bill imposes penalties for violations of the law, up to Rs 250 crore.
  • The drafted bill aims to provide consent based data collection technique.
Impact of the DPDP Bill:
The DPDP Bill is likely to have a significant impact on the way that personal data is handled in India. The bill will provide individuals with more control over their personal data, and it will make it more difficult for companies to collect and use personal data without consent. The bill is also likely to lead to increased investment in data protection compliance in India.
Next steps:
The DPDP Bill is still a draft, and it is not yet clear when it will be passed into law. However, the approval of the bill by the Cabinet is a significant step forward, and it is likely that the bill will be passed into law in the near future. Six years after the Supreme Court declared privacy as a fundamental right, the law will become India’s core data governance framework.
Conclusion:
The DPDP Bill is a landmark piece of legislation that will have a significant impact on data protection in India. The bill is based on international best practices, and it is likely to lead to increased privacy protection for individuals in India.
India’s journey towards enacting comprehensive data protection legislation draws inspiration from international precedents, notably the European Union’s General Data Protection Regulation (GDPR) implemented in 2018. Emulating the GDPR’s principles, India’s proposed legislation aims to empower individuals with control over their personal data, enforce explicit consent for processing sensitive information, and establish stringent penalties for data breaches. By adopting global best practices, India seeks to fortify privacy rights and enhance data security in the digital landscape.

Other Blogs

Previous
Next
ISO/IEC 27701:2025 Transition: What Organizations Need to Know Blog

ISO/IEC 27701:2025 Transition: What Organizations Need to Know

ISO/IEC 27701 has entered a new phase. Published on 14 October 2025, ISO/IEC 27701:2025 replaces…

Read More
PCI KMO Standard v1.0: What It Means for Payment Security Blog

PCI KMO Standard v1.0: What It Means for Payment Security

Learn what PCI KMO Standard v1.0 covers, who it affects, how it supports PIN and…

Read More
Firewall Ruleset Review: What Your Rules Are Really Allowing Blog

Firewall Ruleset Review: What Your Rules Are Really Allowing

Every firewall does exactly what its rules tell it to do - nothing more. A…

Read More
CEA Cyber Security Regulations 2026: Compliance Guide Blog

CEA Cyber Security Regulations 2026: Compliance Guide

The Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2026 create an auditable cyber…

Read More
Incident Response Planning for Regulated Entities in India Blog

Incident Response Planning for Regulated Entities in India

Every regulated entity has an incident response plan. It sits in a policy document, usually…

Read More
AI Governance and Compliance in Indian Financial Services Blog

AI Governance and Compliance in Indian Financial Services

Indian banks, NBFCs, and insurance companies are deploying AI across credit scoring, fraud detection, customer…

Read More
FAQ: Cloud Compliance Questions From Fintech CTOs Blog

FAQ: Cloud Compliance Questions From Fintech CTOs

Any cloud provider with data center regions in India - AWS (Mumbai and Hyderabad), Azure…

Read More
RBI Cybersecurity Directions 2026: A Complete Compliance Guide Blog

RBI Cybersecurity Directions 2026: A Complete Compliance Guide

RBI's approach to cybersecurity regulation has evolved from advisory circulars to mandatory directions. The regulatory…

Read More

Ready to become compliant?

Talk to QRC to understand your scope, close gaps, and move confidently
toward validation readiness.