India Digital Personal Data Protection Act/OBLIGATIONS OF DATA FIDUCIARY/1 of 13

Section 4Grounds for processing personal data

Control family: OBLIGATIONS OF DATA FIDUCIARY

Control description

(1) A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,—

(a) for which the Data Principal has given her consent; or

(b) for certain legitimate uses.

(2) For the purposes of this section, the expression “lawful purpose” means any purpose which is not expressly forbidden by law

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.