Section 7: Certain legitimate uses
Simple Explanation
Section 7 lists situations where personal data can be processed WITHOUT explicit consent. These are called 'certain legitimate uses':
1. Voluntary Provision: When someone voluntarily gives their data for a specific purpose (e.g., giving contact details to receive a receipt).
2. Government Benefits: For providing subsidies, benefits, certificates, licenses, or permits by the government.
3. State Functions: For functions related to India's sovereignty, integrity, or security.
4. Legal Obligations: When the law requires disclosure to the government.
5. Court Orders: Compliance with judgments, decrees, or orders.
6. Medical Emergencies: Threat to life or immediate health threat.
7. Public Health: During epidemics, disease outbreaks, or public health threats.
8. Disasters: During disasters or breakdown of public order.
9. Employment: For employment purposes, preventing corporate espionage, protecting trade secrets, and providing employee benefits.
Key Points
- ✓No consent needed for 9 specific legitimate uses
- ✓Includes government benefits, medical emergencies, and employment
- ✓Voluntary provision for a specific purpose is a legitimate use
- ✓Public health and disaster scenarios are covered
- ✓Processing for state security and sovereignty is allowed
Official Text (Summary)
A Data Fiduciary may process personal data without consent for: (a) specified purposes where data was voluntarily provided; (b) government subsidies, benefits, or services; (c) state functions related to sovereignty, integrity, or security; (d) legal obligations to disclose information; (e) compliance with judgments or orders; (f) medical emergencies; (g) public health measures during epidemics; (h) disaster or public order breakdown; and (i) employment-related purposes including safeguarding trade secrets and corporate espionage prevention.
Source: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023), Ministry of Law and Justice.
Jump to any Section
More Sections in Chapter II
All Chapters
Is your business DPDP compliant?
Avoid penalties up to ₹250 Crore. Let our experts help you implement consent management, grievance redressal, and data protection measures.
Get a Free Compliance Audit