In today's digital age, personal data protection is a paramount concern. With the enactment of the Digital Personal Data Protection Act, 2023, there has been a significant shift towards safeguarding individuals' digital personal data. This groundbreaking legislation prohibits the unauthorized use of such data, reinforcing the importance of privacy in our interconnected world. However, it is essential to recognize that not all data usage is deemed a violation of this act. There are specific instances where the utilization of personal data is considered legitimate and in alignment with the law's provisions. In this article, we will explore and elaborate on these exceptions, shedding light on when and how personal data can be responsibly employed without infringing upon the rights and privacy of individuals.
1. Acknowledgement of receipt through WhatsApp/Phone
In the era of digital communication, it is common to send and receive acknowledgments and confirmations via messaging apps like WhatsApp or through phone calls. The Digital Personal Data Protection Act, 2023 recognizes this as a legitimate use of personal data. When individuals voluntarily share their contact information for such purposes, it does not violate their privacy rights.
2. For the State or any of its instrumentalities to provide or issue to the Data Principal
Government entities often need to interact with citizens and this may involve use of their personal data to provide essential services, benefits, or documents to individuals. The Act allows such use when it is for the benefit of the Data Principal and within the scope of government functions.
3. Personal data already available in digital or non-digital form and digitized subsequently from a database maintained by the State and its instrumentalities and notified by the Central Government
When personal data is already in possession of government authorities and is digitized as part of a recognized database, it can be used without violating the Act, as long as this use aligns with the Act's provisions and government regulations.
4. Government may have personal data for providing Govt. benefits
The government collects personal data for various purposes, including the administration of government benefits and services. The Act allows for the legitimate use of personal data when it is necessary to provide these benefits to eligible individuals.
5. Data required for the interest of sovereignty and integrity of India or security of the State
In matters concerning national security, the Act permits the use of personal data when it is essential for safeguarding the sovereignty and integrity of India or ensuring the security of the State. This provision is crucial for addressing threats and maintaining the nation's security.
6. Obligation to disclose information by any other law for the time being in force
The Act acknowledges that there may be other laws in place that require the disclosure of personal information. In such cases, compliance with these existing laws takes precedence and is considered legitimate under the Act.
7. Compliance with any judgment or decree or order issued under any law for the time being in force in India or any judgment or order relating to claims of a contractual or civil nature under any law in force outside India
When a court order or judgment necessitates the use of personal data, it is deemed legitimate under the Act. This ensures that individuals comply with legal obligations and court rulings without violating data protection regulations.
8. Responding to a medical emergency
During medical emergencies, time-sensitive decisions often rely on access to personal health data. The Act permits the use of such data in emergencies to ensure individuals receive timely and appropriate medical care, thus prioritizing their well-being.
9. Medical treatment or health services during epidemics, outbreaks of disease, or any other threat to public health
Public health emergencies, such as epidemics or disease outbreaks, may require the collection and use of personal health data for contact tracing, monitoring, and containment efforts. The Act allows for the responsible use of data to protect public health.
10. Measures to ensure safety or provide assistance or service during any disaster or breakdown of public order
In times of disasters or public order breakdowns, personal data may be essential for ensuring the safety and well-being of individuals. The Act permits its use in these critical situations to facilitate emergency response and aid delivery.
By understanding these exceptions and the circumstances under which personal data can be legitimately used, we can strike a balance between safeguarding privacy and addressing various essential societal needs in the digital age.
The Digital Personal Data Protect Act, 2023 prohibits the use of the Digital Personal data of the Data Principal. However, there are certain usage of the data which are considered to be legitimate and the use of data in such specific cases does not amount to violation of the act. Following are some of the illustrations where the use of the data is not considered to be violation of the act.
- Acknowledgment of receipt through WhatsApp / Phone
- For the State or any of its instrumalities to provide or issue to the Data Principal
- Personal data already available in the digital form / non-digital form and digitized subsequently from database which is maintained by State and its instrumalities and notified by the Central Government
- Government may have personal data for providing Govt. benefits
- Data required for interest of sovereignty and integrity of India or security of the State
- Obligation to disclosure of information by any other law for the time being in force
- Compliance with any judgment or decree or order issued under any law for the time being in force in India or any judgment or order relating to claims of a contractual or civil nature under any law in force outside India.
- Responding to a medical emergency
- Medical treatment or health services to any individual during epidemic, outbreak of disease, or any other threat to public health.
- Measures to ensure safety or provide assistance or service to any individual during any disaster, or any breakdown of public order.
CAclubindia
