Data Protection — Prelims Questions

With reference to the Digital Personal Data Protection Act, 2023, consider the following statements: 1. It defines 'personal data' to include both digital and non-digital data. 2. It mandates strict data localization for all sensitive personal data. 3. It establishes the Data Protection Board of India as an adjudicatory body. 4. It introduces the concept of 'deemed consent' for certain legitimate uses of data. How many of the statements given above are correct?

Which of the following landmark Supreme Court judgments declared the 'right to privacy' as a fundamental right under Article 21 of the Indian Constitution?

Consider the following statements regarding 'Anonymization' and 'Pseudonymization' in data protection: 1. Anonymization irreversibly removes the link between data and an individual. 2. Pseudonymization allows re-identification of an individual with additional information. 3. Anonymized data typically falls under the direct scope of data protection laws. Which of the statements given above is/are correct?

Which of the following is NOT a right of a 'Data Principal' under the Digital Personal Data Protection Act, 2023?

The concept of 'deemed consent' under the Digital Personal Data Protection Act, 2023, implies that personal data can be processed without explicit consent in certain situations. Which of the following is most likely to be considered a 'legitimate use' for deemed consent?