DPDPA 101

One who decides the "means and purpose" of processing personal data. Who is this?

• Data Processor

• Data Prinicipal

• Data Fiduciary

• All of the above

How should enterprises collect consent of personal data as per the DPDP Act 2023, if not carved out under legitimate uses

• Present notice and seek consent

• Assume implicit consent

• Take a catch-all/All or nothing consent

• Process data and apologise later, if required

Does the DPDP Act apply to physical onboarding forms?

• No, only applies to digital personal data

• Yes, unconditionally

• Maybe, not sure

• Applicable at the point of the data being digitized

Significant Data Fiduciaries, is a class of data fiduciaries who...

• Process large amounts of data

• Process sensitive personal data

• Shall need to appoint a Data Protection officer

• All of the above

The burden of proof to showcase DPDPA compliance rests with

• Data Fiduciary

• Data Processor

• Data Principal

• Data Protection Board

Which of these are the rights of the data prinicipal (Multiple correct options)

• Right to nominate

• Right to review

• Right of grievance redressal

• Right to correction and erasure

Who are relevant stakeholders for driving DPDPA compliance in enterprises? (multiple correct)

• Data Privacy Office

• Chief Digital Officer/Chief Compliance officer

• Chief Information Security Officer/Chief Technology Officer

• Legal Counsel

How is DPDPA different from GDPR or other privacy laws in the world? (multiple correct)

• It is the same

• It is requires the presentation of Notice in 22 scheduled languages

• Verifiable parental consent for children below 18

• It speaks of the concept of "Consent Managers"

How does DPDPA impact the V-CIP process? What should the notice for this interaction include (multiple correct)

• Nothing changes because who cares - RBI regulated

• the personal data and the purpose for which the same is proposed to be processed;

• the manner in which she may exercise her rights

• the manner in which the Data Principal may make a complaint to the Board

Why should you care about DPDPA 2023? (multiple correct)

• $$$$ potential incentives

• Contribute to the privacy revolution in the country

• You have rights as a data principal too!

• You shouldn't care