Data Breaches and Privacy Concerns — Prelims Strategy

Prelims Strategy

For Prelims, a strong grasp of factual details is paramount. Begin by thoroughly understanding the core definitions: what constitutes a data breach, personal data, sensitive personal data (as per IT Rules 2011, though DPDP Act has a different approach), Data Principal, Data Fiduciary, and Significant Data Fiduciary.

Memorize key provisions of the Digital Personal Data Protection Act, 2023, focusing on consent requirements, rights of Data Principals, obligations of Data Fiduciaries, breach notification mandates, and the penalty structure.

Pay close attention to the establishment and functions of the Data Protection Board of India. The K.S. Puttaswamy judgment (2017) is non-negotiable; remember its core finding about the Right to Privacy.

Understand the role and functions of CERT-In. Practice MCQs that test your knowledge of specific sections, definitions, and the chronology of legal developments. Differentiate between the IT Act, 2000 (Sections 43A, 72A), and the DPDP Act, noting which provisions supersede others.

Focus on the 'what' and 'who' aspects, ensuring you can recall specific numbers, names, and key terms accurately.