Digital Personal Data Protection Act, 2023
Science & Technology
- PYQs8
- Articles1
Background
This Act is crucial for understanding India's stance on data privacy, a fundamental right, and its implications for individuals, businesses, and the digital economy. It's a frequently discussed and evolving area in governance and technology.
The Digital Personal Data Protection Act, 2023, is a landmark legislation in India that establishes a comprehensive legal framework for regulating the processing of digital personal data, ensuring the privacy rights of individuals.
Facts & tables
- Enactment Year
- 2023, replacing previous data protection efforts and frameworks.
- Scope
- Regulates the processing of digital personal data within India and for data fiduciaries outside India if related to offering goods/services to data principals in India.
- Children's Privacy
- Mandates parental consent for processing children’s personal data and prohibits practices detrimental to their well-being, such as tracking or targeted advertising.
- Key Principles
- Based on principles of consent, data minimization, purpose limitation, and accountability for data fiduciaries.
| Type | Reference |
|---|---|
| Conceptual area | Indian Polity & Governance |
| Body | Role |
|---|---|
| Ministry of Electronics and Information Technology (MeitY) | Responsible for implementation and oversight |
Prelims angle
Prelims angle: Factual recall
Prelims angle: Multi-statement analysis
- Enacted 2023: New data protection law.
- Regulates digital personal data processing.
- Mandates parental consent for children's data.
- Prohibits tracking/targeted ads for children.
- Safeguards individual privacy rights.
| Year | Framing tags |
|---|---|
| 2025 | Statement-based questions, Factual recall |
| 2022 | Multi-statement analysis, Factual recall |
| 2022 | Multi-statement analysis, Conceptual understanding |
| 2019 | Conceptual understanding, Multi-statement analysis |
| 2018 | Multi-statement analysis, Policy measures |
| 2017 | Factual recall, Multi-statement analysis |
| 2017 | Statement-based questions, Policy measures |
| 2016 | Statement-based questions, Factual recall |
Timeline
-
Indian Polity & Governance
Conceptual area
-
Prelims 2016
Statement-based questions, Factual recall
-
Prelims 2017
Factual recall, Multi-statement analysis
-
Prelims 2017
Statement-based questions, Policy measures
-
Prelims 2018
Multi-statement analysis, Policy measures
-
Prelims 2019
Conceptual understanding, Multi-statement analysis
-
Prelims 2022
Multi-statement analysis, Factual recall
-
Prelims 2022
Multi-statement analysis, Conceptual understanding
-
Prelims 2025
Statement-based questions, Factual recall
-
Government Strengthens Safeguards Against Digital Addiction; 11.37L+ Citizens Reached Through 6,650 Cyber Awareness Workshops
The DPDP Act, 2023, is India's primary law for digital personal data protection, emphasizing consent, data principal rights, and specific safeguards for children's online privacy.
See also
Past papers
2016–2025 · 8 questions
In the news
Government Strengthens Safeguards Against Digital Addiction; 11.37L+ Citizens Reached Through 6,650 Cyber Awareness Workshops
The DPDP Act, 2023, is India's primary law for digital personal data protection, emphasizing consent, data principal rights, and specific safeguards for children's online privacy.
Try these PYQs
In India, it is legally mandatory for which of the following to report on cybersecurity incidents?
1. Service providers
2. Data centres
3. Body corporate
Select the correct answer using the code given below:
In India, section 70-B of the Information Technology Act, 2000 (the IT Act) gives the Central Government the power to appoint an agency of the government to be called the Indian Computer Emergency Response Team. Further, it is legally mandatory for service providers, data centres and body corporates to report on cybersecurity incidents as outlined in the Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013, which were notified under the Information Technology Act, 2000.
Which of the following statements is/are correct regarding Smart India Hackathon 2017?
1. It is a centrally sponsored scheme for developing every city of our country into Smart Cities in a decade.
2. It is an initiative to identify new digital technology innovations for solving the many problems faced by our country.
3. It is a programme aimed at making all the financial transactions in our country completely digital in a decade.
Select the correct answer using the code given below :
Statement 1 is incorrect: The Smart India Hackathon (SIH) is not a scheme for developing Smart Cities. Instead, it is a nationwide initiative aimed at identifying innovative digital technology solutions to solve real-world challenges across various sectors. Statement 2 is correct: The Government of India launched the Smart India Hackathon to encourage students and professionals to develop innovative digital solutions for challenges in agriculture, health, education, energy, environment, and other domains. It serves as a platform for young minds to engage in problem-solving and contribute to technological advancements. Statement 3 is incorrect: While the hackathon focuses on digital technology innovations, it is not specifically centered on digital financial transactions. Instead, it covers a wide range of sectors where technology can drive efficiency and innovation. Hence, correct answer is option (B).
Which of the following is/are the aim/aims of "Digital India" Plan of the Government of India?
1. Formation of India's own Internet companies like China did.
2. Establish a policy framework to encourage overseas multinational corporations that collect Big Data to build their large data centres within our national geographical boundaries.
3. Connect many of our villages to the Internet and bring Wi-Fi to many of our school, public places and major tourist centres
Select the correct answer using the code given below
* Statement 1 is not correct: The formation of India’s own internet companies, similar to China’s approach, is not an aim of the Digital India programme. The initiative focuses on creating digital infrastructure, providing digital services, and promoting digital literacy — not establishing government-backed internet firms. * Statement 2 is not correct: The Digital India plan does not include any policy framework to attract foreign multinational corporations to build data centres in India. While data localisation and data centre policies have emerged later under different frameworks, they are not part of the original Digital India objectives. * Statement 3 is correct: One of the key aims of Digital India is to connect villages through broadband and to provide Wi-Fi access in schools, public places, and tourist centres. This is part of its core pillars like Broadband Highways, Public Internet Access Programme, and Early Harvest Programmes.
Regarding ‘DigiLocker’, sometimes seen in the news, which of the following statements is/are correct?
1. It is a digital locker system offered by the Government under Digital India Programme.
2. It allows you to access your e-documents irrespective of your physical location.
Select the correct answer using the code given below
Statement 1 is correct: DigiLocker is a cloud-based digital locker system launched by the Government of India under the Digital India Programme. Its primary objective is to reduce reliance on physical documents by providing secure digital storage and access to e-documents issued by government departments, educational institutions, and other entities. Statement 2 is correct: DigiLocker enables users to access their electronic documents (e-documents) anytime, anywhere, provided they have an internet connection. This enhances convenience, eliminates the need to carry physical documents, and ensures secure and verifiable digital storage. Therefore, both statements are correct.
With reference to Web 3-0, consider the following statements :
1. Web 3-0 technology enables people to control their own data.
2. In Web 3-0 world, there can be blockchain based social networks.
3. Web 3-0 is operated by users collectively rather than a corporation.
Which of the statements given above are correct?
Statement 1 is correct. A key aspect of Web 3.0 is the concept of decentralization, where users have more control and ownership over their personal data, rather than having it stored and controlled by centralized platforms. Statement 2 is correct. Blockchain technology is a core component of Web 3.0, and it can enable the creation of decentralized, user-owned social networks and platforms. Statement 3 is correct. The decentralized nature of Web 3.0 means that it is not controlled by a single corporation or entity, but rather operated and maintained collectively by the users and participants in the network. Therefore, all three statements regarding Web 3.0 are correct.
Show 3 more PYQs
With reference to communication technologies, what is/are the difference/differences between LTE (Long-Term Evolution) and VoLTE (Voice over Long-Term Evolution)?
1. LTE is commonly marketed as 3G and VoLTE is commonly marketed as advanced 3G.
2. LTE is data-only technology and VoLTE is voice-only technology.
Select the correct answer using the code given below.
Statement 1 is incorrect: LTE is actually marketed as 4G, not 3G. VoLTE is not marketed as advanced 3G, but rather as an advancement over 4G LTE, allowing for voice calls over the 4G network. Statement 2 is incorrect: LTE does primarily focus on providing high-speed data services, but it's not a data-only technology. VoLTE, on the other hand, is not a voice-only technology. It allows for voice calls to be made over the 4G LTE network, but it doesn't exclude data services. Therefore, both statements are incorrect.
Consider the following statements regarding AI Action Summit held in Grand Palais, Paris in February 2025:
I. Co-chaired with India, the event builds on the advances made at the Bletchley Park Summit held in 2023 and the Seoul Summit held in 2024.
II. Along with other countries, US and UK also signed the declaration on inclusive and sustainable AI.
Which of the statements given above is/are correct?
✅ Statement I: Correct
*India co-chaired the AI Action Summit in Paris (Feb 2025), continuing efforts from the Bletchley Park (UK, 2023) and Seoul (South Korea, 2024) Summits on AI governance.* ❌ Statement II: Incorrect
*The joint statement on ‘Inclusive and Sustainable AI’ was signed by 58 countries including India and China, but the US and UK did not sign due to concerns about overregulation.* Correct Answer: Only Statement I is correct.
Consider the following
1. Aarogya Setu
2. CoWIN
3. Digi Locker
4. DIKSHA
Which of the above are built on top of open-source digital platforms?
An open-source digital platform is essentially a software platform where the underlying code is freely available for anyone to see, modify, and distribute. This openness fosters collaboration, transparency, and innovation in software development. All of the above (1. Aarogya Setu, 2. CoWIN, 3. Digi Locker, 4. DIKSHA) are built on top of open-source digital platforms. - Aarogya Setu initially wasn't open-source, but the Indian government later made its source code available. - CoWIN leverages open-source software for its development. - DigiLocker utilizes an open-source platform called Digital Locker System.
- DIKSHA is built on the open-source platform Sunbird.