Differences

This shows you the differences between two versions of the page.

@@ Line 1: / Line 1: @@
+{{htmlmetatags>metatag-keywords=(dpdp module 01, dpdp act 2023 — what changed)&metatag-description=(DPDP Act 2023 + Rules 2026 Crash Course — Module 01: DPDP Act 2023 — what changed. Understand the Acts scope and structure in 60 minutes.)}}
+====== Module 01 — DPDP Act 2023 — what changed ======
+{{ :social:auto:dpdp-module-01.png?direct&1200 |DPDP Act 2023 + Rules 2026 Crash Course Module 01}}
+<WRAP center round info 95%>
+**Goal:** Understand the Act's scope and structure in 60 minutes.
+</WRAP>
+===== A timeline + why it matters =====
+  - 2017: Justice Srikrishna Committee report
+  - 2019: PDP Bill introduced
+  - 2022: Withdrawn
+  - **August 2023: DPDP Act passed**
+  - February 2026: DPDP Rules notified
+For RTI work: §8(1)(j) of RTI Act is recalibrated by DPDP. The two laws now interact at every personal-data RTI.
+===== Scope of DPDP =====
+Applies to **digital personal data** processed:
+  - In India
+  - Outside India in the course of offering goods/services to data principals in India
+Exclusions:
+  - Personal/domestic use
+  - Publicly available data (with caveats)
+  - Court-ordered processing
+  - Research/statistical/archival (with safeguards)
+===== Key terms =====
+  - **Data Principal** = the person whose data
+  - **Data Fiduciary** = the entity that decides purposes/means (≈ Controller in GDPR)
+  - **Data Processor** = entity processing on behalf of Fiduciary
+  - **Consent Manager** = registered intermediary for managing consent
+  - **Significant Data Fiduciary (SDF)** = high-volume / sensitive — extra obligations
+  - **Data Protection Board of India (DPB)** = adjudicatory body
+===== §6: Consent =====
+Consent must be:
+  - **Free** (not coerced)
+  - **Specific** (per purpose)
+  - **Informed** (privacy notice in clear language, in 22 schedule languages)
+  - **Unconditional** (services cannot be denied for refusing optional consent)
+  - **Unambiguous** (positive action, not pre-ticked)
+  - **Withdrawable** (any time, as easy as giving)
+Consent for children (<18): verifiable parental consent required.
+===== §7: Legitimate uses (no consent needed) =====
+legitimate uses where consent is bypassed:
+  - (a) Voluntary provision by data principal
+  - (b) State function — subsidy, benefit, license
+  - (c) Compliance with judgement
+  - (d) Medical emergency
+  - (e) Disaster / public-health crisis
+  - (f) Employment-related (limited)
+  - (g) Public interest specified in Rules
+This is the bridge to RTI — RTI requests for govt records often map to §7(b)/(g).
+===== ✅ Quiz =====
+Quiz available from your [[:courses:dpdp:app|course dashboard]].
+===== Next =====
+  * [[:courses:dpdp:start|← Course overview]]
+  * Next: [[:courses:dpdp:final]]
+//Last reviewed: 24 April 2026.//
+{{tag>course dpdp module-01}}