The Information Technology Act, 2000 serves as the primary framework for ___ prior to the Digital Personal Data Protection Act, 2023.

Data protection in India

True or False: Section 43A of the IT Act does not hold companies accountable for data breaches.

False. Section 43A holds companies accountable for failing to protect sensitive personal data.

What type of data is classified as sensitive personal data under the IT Act?

Sensitive personal data includes passwords, bank account details, credit card numbers, medical records, and biometric data.

Section 72A of the Information Technology Act punishes individuals for disclosing personal information without ___ and with ___ intent.

Consent; harmful

What are the potential penalties under Section 72A for unauthorized disclosure of personal information?

Up to 3 years imprisonment, a fine of up to ₹5 lakh, or both.

Section 72A of the IT Act specifically addresses ___ and ___ in relation to personal information.

Intentional or reckless sharing and breach of contract

What is the primary role of the IT Rules, 2011 in the context of data protection?

To define sensitive personal data and security practices, requiring consent, data encryption, and transparent privacy policies.

Section 43A of the IT Act applies only to ___ data.

Sensitive personal

True or False: The IT Act provides individuals with the right to access, correct, or delete their personal data.

False. The IT Act does not grant these rights, unlike the DPDPA.

What challenges are associated with the enforcement of data protection under the IT Act?

Enforcement is slow and resource-intensive as it relies on courts without a dedicated regulator.

The DPDPA, enacted on August 11, 2023, is India's first dedicated data protection law that establishes the ___ for enforcement.

Data Protection Board

True or False: The IT Act provides a comprehensive framework for user rights and cross-border data transfers.

False; the IT Act lacks provisions for user rights and cross-border data transfers.

What key constitutional judgment accelerated the introduction of the DPDPA by declaring privacy a fundamental right?

The Puttaswamy Judgment (2017)

Section 43A of the IT Act deals primarily with ___ in cases involving sensitive data.

Negligence by corporations leading to data breaches

What must be established to apply Section 43A in a data breach case?

It must be confirmed that the data is sensitive, the company was negligent, and harm occurred.

True or False: The IT Act provides users with comprehensive rights to control their data, including the rights to access and erase.

False. The IT Act does not provide such comprehensive rights; the DPDPA does.