Comprehension

The Supreme Court of India declared that the right to privacy is a fundamental right and that the right to informational privacy is part of this right. Subsequently, the Parliament of India enacted a new law relating to digital personal data protection. The law applies to Indian residents and businesses collecting the data of Indian residents. It also applies to non-citizens living in India whose data processing is "in connection with any activity related to the offering of goods or services" that happens outside India. The law allows personal data to be processed for any lawful purpose. If the personal data is sensitive, then additional safeguards are to be observed. The entity processing data can do so either by taking the concerned individual's consent or for "legitimate uses". which include situations where an individual has voluntarily provided personal data for a specified purpose. The law requires that an individual's consent must be "free, specific, informed, unconditional and unambiguous with a clear affirmative action" and for a specific purpose. The data collected has to be limited to that necessary for the specified purpose. A clear notice containing these details has to be provided to consumers, including the rights of the concerned individual and the grievance redressal mechanism. Individuals have the right to withdraw consent if consent is the ground on which data is being processed. The law also creates rights and obligations for individuals. These include the right to get a summary of all the collected data and to know the identities of all other entities/organisations with whom the personal data has been shared, along with a description of the data shared. Individuals also have the right to correction. completion, updating, and erasure of their data. Besides, they have a right to obtain redressal for their grievances and a right to nominate persons who will receive their data. [Excerpts from Anirudh Burman, "Understanding India's New Data Protection Law", CARNEGIE INDIA, October 03, 2023]

Question: 1

A startup provides a health-tracking app that collects sensitive health data from users. Under the digital personal data protection law in India, what additional precautions must the startup take compared to regular personal data?

Updated On: Dec 1, 2024
  • No additional measures are needed
  • Ensure explicit consent and adopt higher security standards
  • Store the data only with the government agencies
  • Store the data only with the hospitals and other health care institutions
Hide Solution
collegedunia
Verified By Collegedunia

The Correct Option is B

Solution and Explanation

The law mandates that sensitive personal data, such as health data, requires explicit consent and adherence to higher security measures to protect against unauthorized access or misuse.
Was this answer helpful?
0
0
Question: 2

As per the passage, what are the rights included under the digital data protection law of India?

Updated On: Dec 1, 2024
  • 1, 2, 3, 4, 5 and 6
  • 1, 2, 3, 5 and 6
  • 1, 3, 5 and 6
  • 1, 2, 3, and 6
Hide Solution
collegedunia
Verified By Collegedunia

The Correct Option is D

Solution and Explanation

The passage clearly outlines six rights: the right to a summary of collected data, to know data-sharing details, to correct and update data, to remove data, to decide who can receive the data, and to seek redressal of grievances. Therefore, all options are included.
Was this answer helpful?
0
0
Question: 3

An Indian company collects personal data from its users to provide personalized services. The company intends to share this data with a third-party vendor for targeted advertisements. Under the digital personal data protection law in India, what must the company do before sharing the data?

Updated On: Dec 1, 2024
  • Obtain explicit consent from the users
  • Share the data by inferring the uses, as it is for business purposes
  • Encrypt the data and share it with the third-party vendor
  • Inform the third-party vendor that the data is sensitive
Hide Solution
collegedunia
Verified By Collegedunia

The Correct Option is A

Solution and Explanation

As per the law, any sharing of personal data, particularly for secondary purposes like targeted advertisements, requires explicit user consent to ensure compliance and protect user rights.
Was this answer helpful?
0
0
Question: 4

A social media platform processes user data based on the consent given during account creation. A user now wishes to withdraw consent to process their data. Under the digital personal data protection law in India, what must the platform do?

Updated On: Dec 1, 2024
  • Refuse to accept the withdrawal request since consent was already given
  • Comply with the legal requirements and stop processing the data
  • Continue processing the data but notify the user
  • Allow withdrawal only after 30 days
Hide Solution
collegedunia
Verified By Collegedunia

The Correct Option is B

Solution and Explanation

The law grants individuals the right to withdraw consent, and the platform must comply by ceasing the processing of the user’s data, provided it was based on the user’s consent.
Was this answer helpful?
0
0
Question: 5

A financial institution collects biometric data from its clients for verification purposes. If the clients wish to know what data has been collected, under the digital personal data protection law in India, what right allows them to request this information?

Updated On: Dec 1, 2024
  • Right to Data Portability
  • Right to Correction
  • Right to Access
  • Right to be Forgotten
Hide Solution
collegedunia
Verified By Collegedunia

The Correct Option is C

Solution and Explanation

The “Right to Access” under the law allows individuals to request a summary of the personal data collected about them and details of its processing and sharing.
Was this answer helpful?
0
0

Top Questions on Fundamental Rights and Duties

View More Questions

Questions Asked in CLAT exam

View More Questions