Legal Counsel & DPO
Statutory perimeter, processing grounds, sector conflict reconciliation and DPIA
Key Statutory Provisions
5 Enforced ProvisionsGoverns digital personal data processing within India and extraterritorial nexus for offering goods or services to Data Principals in India, with statutory exclusions for personal/domestic use and publicly available data.
Prohibits digital personal data processing except for lawful purposes based on valid affirmative consent under Section 6 or specific statutory legitimate uses recognized under Section 7.
Defines exhaustive non-consent processing grounds including voluntary provision for specified purposes, State subsidies and benefits, employment purposes, medical emergencies, and statutory legal compliance.
Sets forth precise exemptions from core Act obligations for state instrumentalities, law enforcement, judicial proceedings, legal claims, research, archiving, and statistical analysis.
Specifies criteria for Significant Data Fiduciary classification, operational independence of the DPO reporting to the board, mandatory DPIA methodologies, and annual independent data audits.
Key Deliverables & Artifacts
4 Key DeliverablesRecommended Reading Sequence
Chapters essential for discharging this role's specific accountability under the DPDP Act and Rules.
Priority Action Checklists
Interactive self-audit checklists directly owned or reviewed by this role.