Which principle of the Digital Personal Data Protection Act, 2023 ensures that entities collecting personal data must obtain explicit consent from individuals?
Show answer & explanation
Correct answer: D
Explanation
Answer: Notice and Choice Framework
Explanation: The principle of Digital Personal Data Protection Act, 2023 that ensures explicit consent before collecting personal data is the Notice and Choice Framework.
It requires data fiduciaries (organizations collecting data) to:
clearly inform individuals about data collection (Notice)
obtain free, specific, informed, and explicit consent (Choice)
Additional Key Points:
The DPDP Act, 2023 replaces earlier draft data protection frameworks in India
Key concepts include:
consent-based data processing
rights of data principals (individuals)
penalties for data breaches
Applies to both government and private entities handling digital personal data
Potential Exam-Oriented Questions & Answers:
Question: What is required before collecting personal data?
Answer: Explicit consent
Question: What does data localization mean?
Answer: Storing data within a country’s borders