D P D P - Digital Personal Data Protection Bill 2022
(Released on November 18, 2022)

The Bill seeks to:
Govern & Safeguard the use of personal Data
Sets out the rights & duties of users
Obligations on businesses

What is New in the Bill?
Governs Digital Personal Data – identifying a person & is either collected Online or is Digitized.
EXCLUSION of Non-personal & non-digital data.
REMOVED - Categorization of sensitive & critical personal data
Dropped – Algorithmic Accountability, Data Portability, Hardware/software certifications
No data localization requirements
Proposed limits on cross-border data transfers
Concept of ‘deemed consent’ – situations where consent may be assumed & need not be explicit

How does the Bill impact Businesses?
Data consented by individuals can be collected by businesses for lawful purposes. (Businesses to notify users when asking for their consent.)
Businesses to delete data when it no longer serves the purpose for which it is collected.
Govt. to designate some businesses to be ‘Data Fiduciaries’
Businesses to face penalties of upto ₹ 250 cr. for violations & failures to keep information safe.

Rights of Users
Seek information about their personal data, correct & erase their personal information and file grievances.