Section 4: Grounds for processing personal data.

The Digital Personal Data Protection Act, 2023.Central Act · Act 22 of 2023

(1) A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,---

(a) for which the Data Principal has given her consent; or

(b) for certain legitimate uses.

(2) For the purposes of this section, the expression "lawful purpose" means any purpose which is not expressly forbidden by law.

Where this provision sits

Act	The Digital Personal Data Protection Act, 2023.
Section	4
Marginal note	Grounds for processing personal data.
Jurisdiction	Central
Status	In force as published by the source

Find the provision, not just read it

The full text above is free, and it stays free. What a free CourtMesh account adds is everything you cannot do by reading one page at a time:

Search 49,000+ Central and State enactments by what a provision says, not by its number
Jump from any section to every judgment that has applied it
Search 300 million+ Indian court records alongside the statute
Ask a research agent to find and read the case law on a provision for you

Free account. No card. About a minute to create.

Create a free account

Need this as data, not as a page? The Digital Personal Data Protection Act, 2023. is one of 49,000+ enactments on CourtMesh. The Indian court cases API serves the case law that cites these provisions over JSON, with API documentation and plans and pricing. See also the judgment library.