{"id":23142,"date":"2023-11-19T13:56:56","date_gmt":"2023-11-19T08:26:56","guid":{"rendered":"https:\/\/www.stellarinfo.co.in\/blog\/?p=23142"},"modified":"2023-12-06T12:21:00","modified_gmt":"2023-12-06T06:51:00","slug":"impact-of-the-digital-personal-data-protection-act-on-businesses","status":"publish","type":"post","link":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/","title":{"rendered":"Impact of the Digital Personal Data Protection Act on Businesses"},"content":{"rendered":"<table>\n<tbody>\n<tr>\n<th style=\"background-color: #eee; text-align: justify;\"><strong>Summary: <em>The Digital Personal Data Protection Act (DPDPA) revolutionizes data privacy in India. We have created a comprehensive guide to the new legislation and its impact. Learn more about the latest data protection standards and how it impacts businesses.<\/em><\/strong><\/th>\n<\/tr>\n<tr>\n<th>\n<p style=\"text-align: center;\"><a class=\"btn btn-lg btn-primary mr-sm-2\" href=\"https:\/\/www.stellarinfo.co.in\/bitraser\/ppc\/drive-erasure.php?utm_source=Blog-Post&amp;utm_medium=Request-A-Callback&amp;utm_campaign=Blog-Post-BitRaser\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Request A Call Back<\/a><\/p>\n<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">To protect individuals and organizations from the risks of data breaches, governments are increasingly adopting data protection legislation. During the Monsoon Session of Parliament in July-August 2023 the <\/span><a href=\"https:\/\/www.meity.gov.in\/writereaddata\/files\/Digital%20Personal%20Data%20Protection%20Act%202023.pdf\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400;\">Digital Personal Data Protection Act, 2023<\/span><\/a><span style=\"font-weight: 400;\"> was passed.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">In this article, we shall cover:<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv1\">The Digital Personal Data Protection Act, 2023: The Basics<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv2\">Quick Look at Data Protection History in India<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv3\">Why We Need a New Law?<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv4\">Five Key Terms in the New Data Protection Act<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv5\">Chapterwise Explanation of The Digital Personal Data Protection Act?<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv6\">How Does The Digital Personal Data Protection Act Affect Businesses?<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv7\">Impact of the Act on Indian Startups<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv8\">Penalties Under the DPDPA<\/a><\/strong><\/li>\n<li><strong><a href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#srv9\">Responsibility Of Data Erasure, and How Bitraser Helps With Compliance<\/a><\/strong><\/li>\n<\/ul>\n<h2 style=\"text-align: justify;\"><strong id=\"srv1\">The Digital Personal Data Protection Act, 2023: The Basics<\/strong><\/h2>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The <strong> The Digital Personal Data Protection Act<\/strong>, of 2023 aims to protect the personal data of individuals and organizations from misuse.<\/span><\/p>\n<h3 style=\"text-align: justify;\"><b>What is the Data Protection Act?<\/b><\/h3>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The Data Protection Act is a law in India that sets rules for how companies can collect, use, and store people&#8217;s personal information. It also outlines what rights individuals have regarding their own data.<\/span><\/p>\n<h3 style=\"text-align: justify;\"><b>How does the <\/b><b>Data Protection Act <\/b><b>impact any Indian business?<\/b><\/h3>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">If your business collects information from people, like customers or employees, you need to follow this law. It sets out what you can and can&#8217;t do with that data. Not following the rules could lead to fines or legal trouble, so it&#8217;s important to understand what&#8217;s required.<\/span><\/p>\n<h3 style=\"text-align: justify;\"><b>What steps should a business take to comply with <\/b><b>Data Protection\u00a0<\/b><b>law?<\/b><\/h3>\n<ul style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Know what kind of personal data you&#8217;re collecting and why you need it.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Make sure you have strong security measures to protect the data from unauthorized access or leaks.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Tell people what you&#8217;re going to do with their data and get their permission before you collect or use it.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Have a clear policy for deleting or anonymizing data when it is no longer needed or when someone asks for their data to be erased. This makes a <a href=\"https:\/\/www.stellarinfo.co.in\/software\/data-eraser-software.php\" target=\"_blank\" rel=\"noopener\">data erasure tool<\/a> such as BitRaser vital for a business to comply with the DPDPA. Ensuring and proving data erasure where relevant is part of your responsibility as a &#8216;Data Fiduciary&#8217; (in simpler terms, the \u2018data fiduciary\u2019 is the business that handles customers\u2019 data).<\/span><\/li>\n<\/ul>\n<h2 style=\"text-align: justify;\"><strong id=\"srv2\">Quick Look At Data Protection History In India<\/strong><\/h2>\n<p style=\"text-align: justify;\"><b>IT Act, 2000<\/b><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">This was <\/span><a href=\"https:\/\/eprocure.gov.in\/cppp\/rulesandprocs\/kbadqkdlcswfjdelrquehwuxcfmijmuixngudufgbuubgubfugbububjxcgfvsbdihbgfGhdfgFHytyhRtMjk4NzY=\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400;\">India&#8217;s first law<\/span><\/a><span style=\"font-weight: 400;\"> that talked about keeping data safe. But it mainly focused on online transactions and computer security. It did say companies should keep data secure but didn&#8217;t go into much detail.<\/span><\/p>\n<p style=\"text-align: justify;\"><b>Aadhaar Act, 2016<\/b><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">This law is about the <\/span><a href=\"https:\/\/uidai.gov.in\/images\/Aadhaar_Act_2016_as_amended.pdf\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400;\">Aadhaar ID system in India<\/span><\/a><span style=\"font-weight: 400;\">. It has rules for keeping biometric data (like fingerprints) safe. But it only applies to Aadhaar and not other types of data.<\/span><\/p>\n<h2 style=\"text-align: justify;\"><strong id=\"srv3\">What Is The Need For The Digital Personal Data Protection Act, 2023?<\/strong><\/h2>\n<ul style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Countries around the world are making strong data protection laws. India needs to catch up to make sure it can do business easily with other countries.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Technology is moving fast, and data is at risk. Our old laws can&#8217;t handle new challenges like data breaches.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Right now, we have different laws for different things. We need one strong law that covers everything about data protection.<\/span><\/li>\n<\/ul>\n<h2 style=\"text-align: justify;\"><strong id=\"srv4\">Five Key Terms In The New Data Protection Act<\/strong><\/h2>\n<p style=\"text-align: justify;\"><b>Data Principal<\/b><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">This term refers to the individual customer or client whose data you&#8217;re handling. Understanding their rights under the new law, such as the ability to access and correct their data, is crucial for maintaining trust and compliance.<\/span><\/p>\n<p style=\"text-align: justify;\"><b>Data Fiduciary<\/b><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Your business is the data fiduciary if you&#8217;re deciding the purpose and methods of data processing. You have specific responsibilities, like obtaining informed consent from the Data Principal before collecting or using their data. Failure to comply could result in penalties.<\/span><\/p>\n<p style=\"text-align: justify;\"><b>Data Processor<\/b><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">If your business outsources data handling tasks, the third-party service doing the job is the Data Processor. While they don&#8217;t set data usage policies, they&#8217;re still obligated to protect the data. Make sure your contracts with Data Processors are in line with the new law.<\/span><\/p>\n<p style=\"text-align: justify;\"><b>Sensitive Data<\/b><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">This category includes high-risk data like financial information, health records, or biometric data. Handling this type of data comes with additional security requirements. Businesses need to be extra cautious and may need to implement advanced security measures.<\/span><\/p>\n<p style=\"text-align: justify;\"><b>Consent<\/b><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">This is the explicit permission you must obtain from the Data Principal before processing their data. Consent needs to be clear, informed, and revocable. Businesses should have a straightforward process for Data Principals to give or withdraw consent.<\/span><\/p>\n<h2 style=\"text-align: justify;\"><strong id=\"srv5\">Chapterwise Explanation Of The Digital Personal Data Protection Act?<\/strong><\/h2>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The Data Protection Act is structured into 9 chapters, each covering a different aspect of data protection in India.\u00a0<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Below is a list of these chapters along with a brief description of what they likely entail:<\/span><\/p>\n<ol style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><strong>Preliminary: <\/strong>This chapter introduces the Act, its scope, and definitions of key terms. It outlines the objectives and key terminology.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><strong>Obligations Of Data Fiduciary: <\/strong>This chapter outlines the responsibilities and obligations of the &#8216;Data Fiduciary&#8217; \u2013 the entity that collects and processes personal data. It discusses consent, data collection limits, and duties like data security.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><strong>Rights And Duties Of Data Principal: <\/strong>This part focuses on the rights of the individual whose data is being processed, known as the &#8216;Data Principal&#8217;. Topics include the right to access, correct, or delete personal data.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><strong>Special Provisions: <\/strong>This chapter delves into specific scenarios or exceptions to general rules, possibly including provisions for minors, sensitive data types, or cross-border data transfer.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><strong>Data Protection Board Of India: <\/strong>This section outlines the formation, structure, and role of a governing body for data protection in India, specifying its powers, functions, and responsibilities.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\"><strong>Powers, Functions, And Procedures to Be Followed By the Board<\/strong>: <\/span>This chapter elaborates on the powers and procedures of the Data Protection Board. It could cover topics like audits, investigations, and the issuing of guidelines or recommendations.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\"><strong>Appeal And Alternate Dispute Resolution:<\/strong> <\/span>This chapter focuses on the judicial and non-judicial mechanisms available for resolving data protection disputes, including the appeals process.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><strong>Penalties And Adjudication: <\/strong>This section discusses the penalties for violating the Act, how they are determined, and the adjudication process. It may include both financial penalties and other forms of punishment or corrective actions.<\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><strong>Miscellaneous: <\/strong>This final chapter contains various other relevant provisions, such as how the Act interacts with other laws, transitional arrangements, and any other topics not covered in previous chapters.<\/li>\n<\/ol>\n<h2 style=\"text-align: justify;\"><strong id=\"srv6\">How Does The Digital Personal Data Protection Act Affect Businesses?<\/strong><\/h2>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The introduction of DPDPA is set to redefine the boundaries and responsibilities of businesses about personal data.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The Act sets out several requirements for businesses, including:<\/span><\/p>\n<ol style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Purpose limitation:<\/b><span style=\"font-weight: 400;\"> Businesses must collect and process personal data only for a specific purpose.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Data minimization:<\/b><span style=\"font-weight: 400;\"> Businesses must only collect the personal data that is necessary for the purpose.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Storage limitation:<\/b><span style=\"font-weight: 400;\"> Businesses must not store personal data for longer than necessary.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Confidentiality:<\/b><span style=\"font-weight: 400;\"> Businesses must keep personal data confidential and protected from unauthorized access.<\/span><\/li>\n<\/ol>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The following are some of the key impacts of the DPDPA on businesses:<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li aria-level=\"1\"><b>Data Handling Changes<\/b><\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Businesses must revamp how they gather and store data to comply. This may mean getting permission before collecting personal data, reducing data collected, and erasure of unnecessary data.<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li aria-level=\"1\"><b>Fresh Responsibilities<\/b><\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Businesses get new duties under the DPDPA. Ensuring data accuracy and security, plus responding to data subject requests, become priorities. Setting up data security measures and response procedures is a must.<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li aria-level=\"1\"><b>Rising Compliance Costs<\/b><\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Adhering to the DPDPA can increase costs. Establishing data security measures, hiring data protection officers, and managing data subject requests may all contribute.<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li aria-level=\"1\"><b>Risk of Fines<\/b><\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Non-compliant businesses face fines and penalties. Ignoring the rules can lead to significant financial consequences.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The DPDPA is a game-changer for businesses in India. Those dealing with personal data must align with the DPDPA to sidestep fines and ensure a smooth operational journey.<\/span><\/p>\n<h2 style=\"text-align: justify;\"><strong id=\"srv7\">Impact Of The Act On Indian Startups<\/strong><\/h2>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Indian startups are facing a funding winter, with investment declining by 70% in the fiscal year 2023. This is due to several factors, including:<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rising interest rates<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Recessionary trends in developed markets<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The downturn in the value of technology stocks<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">To weather the storm, startups are cutting costs, becoming more efficient, and focusing on profitability. However, The <strong>Digital Personal Data Protection Act<\/strong> (DPDPA), could add to their compliance costs.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The DPDPA is similar to the European Union&#8217;s General Data Protection Regulation (GDPR), which has been <\/span><a href=\"https:\/\/www.oxfordmartin.ox.ac.uk\/downloads\/Privacy-Regulation-and-Firm-Performance-Giorgio-WP-Upload-2022-1.pdf\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400;\">estimated to have cost businesses 8.1% in profits<\/span><\/a><span style=\"font-weight: 400;\">. The DPDPA could have a similar impact on Indian startups.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">With a notable fraction of unicorns\u2014companies valued at over $1 billion\u2014failing to turn profits, the situation is compounded. Only <\/span><a href=\"https:\/\/entrackr.com\/2023\/04\/profit-loss-index-decoding-latest-financials-of-100-unicorns-of-india\/\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400;\">31 of nearly 100 unicorns have managed to attain profitability<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The next few years will be a test of the resilience of Indian startups. Those who can adapt and innovate will be the ones who succeed.<\/span><\/p>\n<h2 style=\"text-align: justify;\"><strong id=\"srv8\">Penalties Under The DPDPA<\/strong><\/h2>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The DPDPA includes specific provisions for penalties if there&#8217;s a breach of the Act&#8217;s rules.\u00a0<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The Data Protection Board of India (the Board) is responsible for determining if a breach is significant and imposing monetary penalties accordingly.\u00a0<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The amount of the penalty is determined based on various factors, such as:<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">nature of the breach<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">type of data affected<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">the actions taken by the person responsible for the breach<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n<table id=\"tablepress-156\" class=\"tablepress tablepress-id-156\">\n<thead>\n<tr class=\"row-1\">\n\t<th class=\"column-1\">Breach Description<\/th><th class=\"column-2\">Penalty<\/th>\n<\/tr>\n<\/thead>\n<tbody class=\"row-hover\">\n<tr class=\"row-2\">\n\t<td class=\"column-1\">Failure to take reasonable security safeguards to prevent personal data breach<\/td><td class=\"column-2\">Up to 250 crore rupees<\/td>\n<\/tr>\n<tr class=\"row-3\">\n\t<td class=\"column-1\">Failure to notify the Board or affected Data Principal of a personal data breach<\/td><td class=\"column-2\">Up to 200 crore rupees<\/td>\n<\/tr>\n<tr class=\"row-4\">\n\t<td class=\"column-1\">Breach of obligations related to children<\/td><td class=\"column-2\">Up to 200 crore rupees<\/td>\n<\/tr>\n<tr class=\"row-5\">\n\t<td class=\"column-1\">Breach of obligations of Significant Data Fiduciary<\/td><td class=\"column-2\">Up to 150 crore rupees<\/td>\n<\/tr>\n<tr class=\"row-6\">\n\t<td class=\"column-1\">Breach of duties under section 15<\/td><td class=\"column-2\">Up to 10,000 rupees<\/td>\n<\/tr>\n<tr class=\"row-7\">\n\t<td class=\"column-1\">Breach of any term of voluntary undertaking accepted by the Board<\/td><td class=\"column-2\">Up to the extent applicable for the breach<\/td>\n<\/tr>\n<tr class=\"row-8\">\n\t<td class=\"column-1\">Breach of any other provision of this Act<\/td><td class=\"column-2\">Up to 50 crore rupees<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<!-- #tablepress-156 from cache --><\/p>\n<h2 style=\"text-align: justify;\"><strong id=\"srv9\">Responsibility Of Data Erasure, And How Bitraser Helps With Compliance<\/strong><\/h2>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">In the wake of the Digital Personal Data Protection Bill, of 2023, ensuring the complete and irreversible erasure of personal data has never been more critical.\u00a0<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The <strong>Digital Personal Data Protection Act<\/strong> outlines the rights of a data principal to request data erasure, and the obligation of a data fiduciary to comply.\u00a0<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The key points:<\/span><\/p>\n<ul style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Chapter 2 of the Act covers the Obligations of the Data Fiduciary or any entity that collects personal data.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Section 8(7) under this chapter states that the data fiduciary must erase the personal data of an individual if consent is withdrawn or the original purpose for data collection no longer applies.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">There are some exceptions where data retention may still be required by other laws.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Chapter 3 details the Rights and Duties of the Data Principal or the individual whose personal data is involved.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Section 12 gives data principals the right to request complete erasure of their data from a data fiduciary.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">On receiving such a request, the data fiduciary is obligated to permanently erase the individual&#8217;s data, unless retaining it is critical for legal reasons or the original specified purpose.<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">The penalties for non-compliance are severe.\u00a0<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Enter <\/span><a href=\"https:\/\/www.stellarinfo.co.in\/bitraser\/drive-eraser-software.php\"><span style=\"font-weight: 400;\">BitRaser Drive Eraser<\/span><\/a><span style=\"font-weight: 400;\"> &#8211; your ultimate solution for data protection compliance.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">BitRaser is not just another <a href=\"https:\/\/www.stellarinfo.co.in\/software\/data-eraser-software.php\" target=\"_blank\" rel=\"noopener\">data erasure tool<\/a>. It&#8217;s a NIST-Tested Software, compliant with every global erasure standard. It guarantees the absolute deletion of data beyond any scope of recovery. Whether you&#8217;re an enterprise, an IT Asset Disposition Company, or a government institution, BitRaser caters to all.<\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">Here are some of the key benefits of using BitRaser Drive Eraser:<\/span><\/p>\n<ol style=\"text-align: justify;\">\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Generates tamper-proof certificates of data erasure. [<\/span><a href=\"https:\/\/www.stellarinfo.co.in\/pdf\/BitRaser-Sample-Report.pdf\"><span style=\"font-weight: 400;\">Check a sample.<\/span><\/a><span style=\"font-weight: 400;\">]<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Complies with global data privacy laws and audit requirements.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Can wipe data from different types of devices, including remote ones.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Integrates with cloud and asset management tools.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Supports 24 global wiping standards and allows for configuration and automation.<\/span><\/li>\n<\/ol>\n<h2 style=\"text-align: justify;\"><b>Conclusion<\/b><\/h2>\n<p style=\"text-align: justify;\"><span style=\"font-weight: 400;\">In an era where data breaches can cause hefty fines, BitRaser Drive Eraser offers complete peace of mind. <\/span><span style=\"font-weight: 400;\">Its certification and adherence to global data privacy laws make it the best-suited tool for compliance with the <strong>Digital Personal Data Protection Act<\/strong>, of 2023.\u00a0 <\/span><span style=\"font-weight: 400;\">Choose BitRaser Drive Eraser, because when it comes to data protection, you need the best.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Summary: The Digital Personal Data Protection Act (DPDPA) revolutionizes data privacy in India. We have created a comprehensive guide to the new legislation and its impact. Learn more about the latest data protection standards and how it impacts businesses. Request A Call Back To protect individuals and organizations from the risks of data breaches, governments [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":23276,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[123],"tags":[],"class_list":["post-23142","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-erasure","has_thumb"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How Businesses Impacted by Digital Personal Data Protection Act?<\/title>\n<meta name=\"description\" content=\"India has introduced Digital Personal Data Protection Act, 2023. This legislation aims to safeguard the personal data of its citizens.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Businesses Impacted by Digital Personal Data Protection Act?\" \/>\n<meta property=\"og:description\" content=\"India has introduced Digital Personal Data Protection Act, 2023. This legislation aims to safeguard the personal data of its citizens.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/\" \/>\n<meta property=\"og:site_name\" content=\"Stellar Data Recovery Blog - Tips and Solutions\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-19T08:26:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-06T06:51:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2023\/11\/Impact-of-the-Digital-Personal-Data-Protection-Act.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Girish\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Girish\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Businesses Impacted by Digital Personal Data Protection Act?","description":"India has introduced Digital Personal Data Protection Act, 2023. This legislation aims to safeguard the personal data of its citizens.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/","og_locale":"en_GB","og_type":"article","og_title":"How Businesses Impacted by Digital Personal Data Protection Act?","og_description":"India has introduced Digital Personal Data Protection Act, 2023. This legislation aims to safeguard the personal data of its citizens.","og_url":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/","og_site_name":"Stellar Data Recovery Blog - Tips and Solutions","article_published_time":"2023-11-19T08:26:56+00:00","article_modified_time":"2023-12-06T06:51:00+00:00","og_image":[{"width":1000,"height":600,"url":"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2023\/11\/Impact-of-the-Digital-Personal-Data-Protection-Act.jpg","type":"image\/jpeg"}],"author":"Girish","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Girish","Estimated reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#article","isPartOf":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/"},"author":{"name":"Girish","@id":"https:\/\/www.stellarinfo.co.in\/blog\/#\/schema\/person\/0200f068dc76e3a44f8510d280528bba"},"headline":"Impact of the Digital Personal Data Protection Act on Businesses","datePublished":"2023-11-19T08:26:56+00:00","dateModified":"2023-12-06T06:51:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/"},"wordCount":1949,"commentCount":0,"publisher":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/#organization"},"image":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2023\/11\/Impact-of-the-Digital-Personal-Data-Protection-Act.jpg","articleSection":["Data Erasure"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/","url":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/","name":"How Businesses Impacted by Digital Personal Data Protection Act?","isPartOf":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#primaryimage"},"image":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2023\/11\/Impact-of-the-Digital-Personal-Data-Protection-Act.jpg","datePublished":"2023-11-19T08:26:56+00:00","dateModified":"2023-12-06T06:51:00+00:00","description":"India has introduced Digital Personal Data Protection Act, 2023. This legislation aims to safeguard the personal data of its citizens.","breadcrumb":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#primaryimage","url":"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2023\/11\/Impact-of-the-Digital-Personal-Data-Protection-Act.jpg","contentUrl":"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2023\/11\/Impact-of-the-Digital-Personal-Data-Protection-Act.jpg","width":1000,"height":600,"caption":"Data Protection Bill"},{"@type":"BreadcrumbList","@id":"https:\/\/www.stellarinfo.co.in\/blog\/impact-of-the-digital-personal-data-protection-act-on-businesses\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.stellarinfo.co.in\/blog\/"},{"@type":"ListItem","position":2,"name":"Impact of the Digital Personal Data Protection Act on Businesses"}]},{"@type":"WebSite","@id":"https:\/\/www.stellarinfo.co.in\/blog\/#website","url":"https:\/\/www.stellarinfo.co.in\/blog\/","name":"Stellar Data Recovery Blog - Tips and Solutions","description":"","publisher":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stellarinfo.co.in\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.stellarinfo.co.in\/blog\/#organization","name":"Stellar Data Recovery","url":"https:\/\/www.stellarinfo.co.in\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.stellarinfo.co.in\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2020\/07\/stellar-data-recovery-logo.png","contentUrl":"https:\/\/www.stellarinfo.co.in\/blog\/wp-content\/uploads\/2020\/07\/stellar-data-recovery-logo.png","width":181,"height":52,"caption":"Stellar Data Recovery"},"image":{"@id":"https:\/\/www.stellarinfo.co.in\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.stellarinfo.co.in\/blog\/#\/schema\/person\/0200f068dc76e3a44f8510d280528bba","name":"Girish","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.stellarinfo.co.in\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c43aa311fe399b0e1b0c69ba4891a73e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c43aa311fe399b0e1b0c69ba4891a73e?s=96&d=mm&r=g","caption":"Girish"},"description":"Girish is a blogger and writer. He has over 6 years of experience in Data Recovery and Data Eraser technology. In his free time, he writes about technical tips and tutorials.","url":"https:\/\/www.stellarinfo.co.in\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/posts\/23142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/comments?post=23142"}],"version-history":[{"count":7,"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/posts\/23142\/revisions"}],"predecessor-version":[{"id":23284,"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/posts\/23142\/revisions\/23284"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/media\/23276"}],"wp:attachment":[{"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/media?parent=23142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/categories?post=23142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stellarinfo.co.in\/blog\/wp-json\/wp\/v2\/tags?post=23142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}