Bill 2022
Bill 2019

The Personal Data Protection Bill, 2019
1 Short title and commencement
2 Application of Act to processing of personal data.
3 Definitions of data fiduciary
4 Prohibition of processing of personal data.
5 Limitation on purpose of processing of personal data.
6 Limitation on collection of personal data
7 Requirement of notice for collection or processing of personal data
8 Applicability of Personal Data Protection Act.
9 Restriction on retention of personal data
10 Accountability of data fiduciary
11 Consent necessary for processing of personal data
12 Grounds for processing of personal data without consent in certain cases
13 Processing of personal data necessary for purposes related to employment, etc
14 Processing of personal data for other reasonable purposes
15 Categorisation of personal data as sensitive personal data
16 Processing of personal data and sensitive personal data of children
17 Right to confirmation and access
18 Right to correction and erasure
19 Right to data portability
20 Right to be forgotten
21 General conditions for the exercise of rights in this Chapter
22 Privacy by design policy
23 Transparency in processing of personal data
24 Security safeguards
25 Reporting of personal data breach
26 Classification of data fiduciaries as significant data fiduciaries
27 Data protection impact assessment
28 Maintenance of records
29 Audit of policies and conduct of processing, etc
30 Data protection officer
31 Processing by entities other than data fiduciaries
32 Grievance redressal by data fiduciary
33 Prohibition on processing of sensitive personal data and critical personal data outside India
34 Conditions for transfer of sensitive personal data and critical personal data
35 Power of Central Government to exempt any agency of Government from application of the Act
36 Exemption of certain provisions for certain processing of personal data
37 Power of Central Government to exempt certain data processors
38 Exemption for research, archiving or statistical purposes
39 Exemption for manual processing by small entities
40 Sandbox for encouraging innovation, etc
41 Establishment of Authority
42 Composition and qualifications for appointment of Members
43 Terms and conditions of appointment
44 Removal of Chairperson or other Members
45 Powers of Chairperson
46 Meetings of Authority
47 Vacancies, etc., not to invalidate proceedings of Authority
48 Officers and other employees of Authority
49 Powers and functions of Authority
50 Codes of practice
51 Power of Authority to issue directions
52 Power of Authority to call for information
53 Power of Authority to conduct inquiry
54 Action to be taken by Authority pursuant to an inquiry
55 Search and seizure
56 Co-ordination between Authority and other regulators or authorities
57 Penalties for contravening certain provisions of the Act
58 Penalty for failure to comply with data principal requests under Chapter V
59 Penalty for failure to furnish report, returns, information, etc
60 Penalty for failure to comply with direction or order issued by Authority
61 Penalty for contravention where no separate penalty has been provided
62 Appointment of Adjudicating Officer
63 Procedure for adjudication by Adjudicating Officer
64 Compensation
65 Compensation or penalties not to interfere with other punishment
66 Recovery of amounts
67 Establishment of Appellate Tribunal
68 Qualifications, appointment, term, conditions of service of Members
69 Vacancies
70 Staff of Appellate Tribunal
71 Distribution of business amongst Benches
72 Appeals to Appellate Tribunal
73 Procedure and powers of Appellate Tribunal
74 Orders passed by Appellate Tribunal to be executable as a decree
75 Appeal to Supreme Court
76 Right to legal representation
77 Civil court not to have jurisdiction
Grants by Central Government
Data Protection Authority of India Funds
Accounts and Audit
Furnishing of returns, etc., to Central Government
82 Re-identification and processing of de-identified personal data
83 Offences to be cognizable and non-bailable
84 Offences by companies
85 Offences by State
Power of Central Government to issue directions
Members, etc., to be public servants
Protection of action taken in good faith
Exemption from tax on income
Delegation
91 Act to promote framing of policies for digital economy, etc
Bar on processing certain forms of biometric data
Power to make rules
Power to make regulations
Rules and regulations to be laid before Parliament
Overriding effect of this Act
Power to remove difficulties
Amendment of Act 21 of 2000

Amendment of Act 21 of 2000

Bare Act

Section

Bill2019Power to remove difficulties