DPDPA Section 4 — Grounds for processing personal data
Applies to: Data Fiduciary
What this section does
Personal data may be processed only for a lawful purpose, and only either with the Data Principal's consent or for a recognised 'legitimate use'.
Plain-English summary prepared by KensaraAI — not the statutory text. Read the official Act ↗
What you have to do
- ▸ Identify a lawful basis before any processing
- ▸ Document the purpose for each processing activity
Enforcement under this section (0)
No enforcement action citing this section has been recorded yet. The Data Protection
Board is not yet issuing penalties under the DPDPA — this page will populate as
enforcement begins.