Digital Personal Data Protection Framework (2024–26): Provisions, Rights & Constitutional Linkage

---

1. Why in News?

During 2024–26:

• Rules under the Digital Personal Data Protection framework progressed.

• Debate intensified over:

  • Government exemptions

  • Data fiduciary obligations

  • Cross-border data transfer

• Questions raised on privacy vs state surveillance.

Implementation phase brought legal clarity issues.

---

2. Constitutional Background

Privacy declared a Fundamental Right in:

K.S. Puttaswamy v. Union of India (2017)

Derived from:

• Article 21 (Right to Life & Personal Liberty)

This is your static anchor.

---

3. Key Concepts

Personal Data

Any data about an identifiable individual.

Data Principal

The individual whose data is collected.

Data Fiduciary

Entity that determines purpose and means of processing data.

UPSC loves definitions.

---

4. Key Features

• Consent-based data processing

• Right to correction & erasure

• Data Protection Board for enforcement

• Penalties for breach

• Exemptions for certain state purposes

---

5. Key Issues

• Scope of government exemptions

• Data localisation debate

• Surveillance concerns

• Corporate compliance burden

---

6. Static Linkage

Related Articles:

• Article 19 (Freedom of speech)

• Article 21 (Privacy)

Doctrine of proportionality important.

---

7. Prelims Angle

Likely questions:

• Who is a data fiduciary?

• Privacy derived from which Article?

• Which judgment recognised privacy as FR?

• Is data protection a statutory or constitutional right?

Statement-based trap likely.

---

8. Mains Angle

• Balance between privacy & national security

• Data sovereignty debate

• Role of state in regulating digital space

---

9. RBI Grade B Angle

• Data governance in fintech

• Digital payments ecosystem regulation