CHAPTER II OBLIGATIONS OF DATA FIDUCIARY
The Digital Personal Data Protection Act, 2023
(1) A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,—
(a) for which the Data Principal has given her consent; or
(b) for certain legitimate uses.
(2) For the purposes of this section, the expression “lawful purpose” means any purpose which is not expressly forbidden by law.
1 question in 2 of our papers cite Section 4. Try these from the free papers:
1. Under Section 4 of the Digital Personal Data Protection Act, 2023, personal data may be processed only for a lawful purpose for which the Data Principal has given consent or for certain legitimate uses. 'Lawful purpose' means any purpose which is: