Which of the following statements are correct regarding the Digital Personal Data Protection Act, 2023? 1. It regulates the processing of digital personal data. 2. It applies to data processed within India and outside India if offering goods or services in India. 3. It completely bans cross-border data transfer. 4. It provides rights to individuals regarding their personal data.

Explanation

The correct answer is (A) 1, 2, and 4 only Explanation: • Statement 1 is correct: The Act provides for the processing of digital personal data in a manner that recognizes both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes. • Statement 2 is correct: It has extra-territorial jurisdiction if data is processed outside India in connection with any activity related to offering goods or services to Data Principals within India. • Statement 4 is correct: It grants individuals (Data Principals) rights such as the right to access, correction, and erasure. Information Booster: • Statement 3 is incorrect because the Act allows cross-border data transfer to certain countries/territories unless specifically restricted by the Central Government. Additional Knowledge: • The Act introduces the concept of 'Data Fiduciary' (the entity determining the purpose of processing) and 'Data Principal' (the individual whose data is processed).