DPDP Act 2023
India’s Digital Personal Data Protection Act, governing personal data processing.
Short answer
What is DPDP Act 2023?
The Digital Personal Data Protection Act, 2023 governs the processing of digital personal data in India, establishing obligations around lawful basis, consent, purpose limitation, retention and the rights of data principals, with data fiduciaries accountable for compliance.
Definition
The Digital Personal Data Protection Act, 2023 governs the processing of digital personal data in India, establishing obligations around lawful basis, consent, purpose limitation, retention and the rights of data principals, with data fiduciaries accountable for compliance.
Why It Matters
Campaigns process substantial personal data. Consent must be specific and recorded, purpose must be stated, retention must be limited, and a grievance officer must be reachable. Where a consultancy processes client-held voter data, it does so under the client’s instruction as data fiduciary.
Example in Indian Elections
Contact lists built for a campaign carry recorded consent with stated purpose, are retained only for the campaign period, and honour withdrawal immediately.
Related Terms
- Model Code of ConductECI guidelines governing party and candidate conduct once an election is announced.
- Silence PeriodThe 48 hours before polling closes when public campaigning is prohibited.
- Election Expenditure LimitThe statutory cap on what a candidate may spend on their campaign.
- Candidate AffidavitThe sworn declaration of assets, liabilities and criminal cases filed at nomination.
- Paid NewsEditorial coverage secretly purchased and presented as independent journalism.
- Polling BoothThe individual polling station where a defined group of voters casts their votes.