The Digital Personal Data Protection Act, 2023.
Section 4. Grounds for processing personal data.
(1) A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,---
(a) for which the Data Principal has given her consent; or
(b) for certain legitimate uses.
(2) For the purposes of this section, the expression "lawful purpose" means any purpose which is not expressly forbidden by law.
Source: IndiaCode Portal, Legislative Department, Ministry of Law and Justice, Government of India. Open on India Code Check against the official text before relying on it.
Cases citing this section
No order or office report we hold cites this section yet.
Source: Order and office-report PDFs whose text cites the section, read by rule (document_citations); each case through its orders and office reports that carry the PDF