Spice Route Legal
Pending the implementation of the Digital Personal Data Protection Act, 2023 (“DPDPA”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) enacted under the Information Technology Act, 2000 (“IT Act”) is presently the primary general law enabling protection of personal data in India. It prescribes procedures for the lawful collection of personal data and seeks to ensure adherence to reasonable security standards by body corporates.
