JUDICIAL/ LAW-EXAMS: IMPORTANT “ONE-LINERS” on DIGITAL PERSONAL DATA PROTECTION ACT, 2023 (DPDPA)

1. The Digital Personal Data Protection Act (DPDPA) is Act No.________of 2023—Act No.22.
2. The DPDPA, 2023 got assent of President of India (i.e. enacted) on which date?—11-August-2023.
3. The DPDPA, 2023 consists of total_______Sections & ______Rules—44 Sections; 23 Rules.
4. True/ False: Before DPDPA, 2023, there was no standalone law for personal data protection—True.
5. Before DPDPA, 2023, the use of personal data was regulated under which Act?—Information Technology Act, 2000.
6. The DPDPA, 2023 moves around ‘data’ ‘personal data’, ‘digital personal data’, ‘personal data breach’ and ‘protection from data breach’ leading to right to privacy as recognized under Article______of the Indian Constitution—Article 21.
7. Section 2(h) of the DPDPA, 2023 defines the term—Data.
8. Under DPDPA, 2023, a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means is known as—“Data” [Section 2(g)].
9. As per DPDPA, 2023, any data about an individual who is identifiable by or in relation to such data is called—Personal Data [Section 2(t)].
10. Section 2(n) of the DPDPA, 2023 defines the expression— Digital Personal Data.
11. Under DPDPA, 2023, personal data in digital form is known as—Digital Personal Data. [Section 2(n)].
12. As per DPDPA, 2023, any unauthorised processing of personal data or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to personal data, that compromises the confidentiality, integrity or availability of personal data is an act of—Personal Data Breach. [Section 2(u)].
13. Under DPDPA, 2023, “child” means an individual who has not completed the age of _______ years—18-Years. [Section 2(f)].
14. Under DPDPA, 2023, a person registered with the Board, who acts as a single point of contact to enable a Data Principal to give, manage, review and withdraw her consent through an accessible, transparent and interoperable platform is known as—Consent Manager  [Section 2(g)].
15. Section 2(i) of the DPDPA, 2023 defines the term—Data Fiduciary.
16. Under DPDPA, 2023, any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data is called—Data Fiduciary [Section 2(i)].
17. Section 2(j) of the DPDPA, 2023 defines the term—Data Principal.
18. Under DPDPA, 2023, the individual to whom the personal data relates is known as—Data Principal. [Section 2(i)].
19. Under DPDPA, 2023, in case of a child below the age of 18-years, who shall be ‘data principal’ of such child?—The parents or lawful guardian of such a child [Section 2(i)].
20. Under DPDPA, 2023, in case of a person with disability, who shall be ‘data principal’ of such person with disability?—Lawful guardian, acting on her behalf [Section 2(i)].
21. The expression “Data Processor” is defined under Section_______of DPDPA, 2023—Section 2(k).
22. Under DPDPA, 2023, any person who processes personal data on behalf of a Data Fiduciary is called—Data Processor [Section 2(k)].
23. The expression “Digital Office” is defined under Section_______of DPDPA, 2023—Section 2(m).
24. Under DPDPA, 2023, an office that adopts an online mechanism wherein the proceedings, from receipt of intimation or complaint or reference or directions or appeal, as the case may be, to the disposal thereof, are conducted in online or digital mode is called—Digital Office [Section 2(m)].
25. The expressions ‘gain’ and ‘loss’ are respectively defined under Section_______of the DPDPA, 2023—Section 2(o) and 2(p)
26. True/ False: As per DPDPA, 2023, the term “gain” means a gain in property or supply of services, whether temporary or permanent—True [Section 2(o)]
27. True/ False: As per DPDPA, 2023, the term “gain” means an opportunity to earn remuneration or greater remuneration or to gain a financial advantage otherwise than by way of legitimate remuneration—True [Section 2(o)]
28. True/ False: As per DPDPA, 2023, the term “loss” means a loss in property or interruption in supply of services, whether temporary or permanent—True [Section 2(p)]
29. True/ False: As per DPDPA, 2023, the term “loss” means a loss of opportunity to earn remuneration or greater remuneration or to gain a financial advantage otherwise than by way of legitimate remuneration—True [Section 2(p)]
30. Under DPDPA, 2023, ‘State’ as defined under Article 12 of the Constitution of India is also included within the definition of ‘Person’—True. [Section 2(s)].
31. Under DPDPA, 2023, in relation to personal data, a wholly or partly automated operation or set of operations performed on digital personal data, and including operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction is known as—Processing. [Section 2(x)].
32. Applicability of DPDPA within India—True/ False: The DPDPA, 2023 shall apply to the processing of digital personal data within the territory of India where the personal data is collected in digital form—True. [Section 3].
33. Applicability of DPDPA within India—True/ False: The DPDPA, 2023 shall apply to the processing of digital personal data within the territory of India where the personal data is collected in non-digital form and digitised subsequently—True. [Section 3].
34. Applicability of DPDPA outside India—True/ False: The DPDPA, 2023 shall apply to processing of digital personal data outside the territory of India, if such processing is in connection with any activity related to offering of goods or services to Data Principals within the territory of India—True. [Section 3].
35. Non-Applicability of DPDPA—True/ False: The DPDPA, 2023 shall not apply to personal data processed by an individual for any personal or domestic purpose—True. [Section 3].
36. Non-Applicability of DPDPA—True/ False: The DPDPA, 2023 shall not apply to personal data that is made or caused to be made publicly available by the Data Principal to whom such personal data relates—True. [Section 3].
37. Non-Applicability of DPDPA—True/ False: The DPDPA, 2023 shall not apply to personal data that is made or caused to be made publicly available by any other person who is under an obligation under any law for the time being in force in India to make such personal data publicly available—True. [Section 3].
38. X, an individual, while blogging her views, has publicly made available her personal data on social media. In such case, the provisions of this Act shall not apply as per Section________of the DPDPA, 2023—Section 3.

Compiled by Team@LegalMines