Module 1 · Self-test

What is the DPDPA?

7 questions. Pick one answer for each, then mark yourself. Nothing leaves your browser.

1. A company in Singapore runs a shopping app used by customers in India. Does the Act reach its processing?No; the Act applies only to processing carried out inside IndiaYes, because the processing is connected with offering goods or services to Data Principals in IndiaOnly if the company has a registered office in IndiaOnly if the customers pay in rupees

2. Which of these is outside the Act under Section 3(c)?A shop's customer list typed into a spreadsheetA payroll file held by a company's outsourced vendorAn individual's own phone contacts kept for personal or domestic purposesCustomer forms collected on paper and later scanned

3. Under the Act, who is the Data Fiduciary?The individual the personal data is aboutThe vendor that stores data on someone else's instructionsThe registered platform through which consent is given and withdrawnThe person who, alone or with others, determines the purpose and means of processing

4. When does the Act come into force?On dates the Central Government notifies, which may differ for different provisionsOn 11 August 2023, the day it was published in the GazetteEighteen months after the Rules were publishedOnly once the Data Protection Board has been constituted

5. What does Section 44(3) do to the Right to Information Act, 2005?Repeals itSubstitutes its personal-information exemption with the words 'information which relates to personal information'Removes every exemption available to public authoritiesAdds a new right of appeal to the Data Protection Board

6. From which date do the Rules on notice, security safeguards, breach intimation and retention apply?13 November 202513 November 202613 May 202711 August 2023

7. When the Central Government amends the penalty Schedule under Section 42, what limit applies?There is no limitEach amendment needs a fresh Act of ParliamentPenalties may only be lowered, never raisedNo penalty may be raised to more than twice what the Act originally specified