Lok Sabha Question No. 5155 (UNSTARRED), answered on 2025-04-02
Subject: Cases Registered under DPDP Act
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: Shri Devesh Shakya

## GOVERNMENT OF INDIA MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY

## LOK SABHA UNSTARRED QUESTION NO. 5155

TO BE ANSWERED ON: 02.04.2025

## CASES REGISTERED UNDER DPDP ACT

## †5155. SHRI DEVESH SHAKYA:

Will the Minister of ELECTRONICS AND INFORMATION TECHNOLOGY be pleased to state:

- (a) the number of cases registered so far under Digital Personal Data Protection Act (DPDP Act) since the implementation of this Act in Uttar Pradesh, district-wise;
- (b) the number of cases disposed of out of all the registered cases;
- (c) the disposal rate of the said cases along with the number of pending cases;
- (d) the steps taken by the Government for effective implementation of data protection laws and to promote redressal of complaints;
- (e) whether any special mechanism or monitoring system is in place for this purpose and if so, the details thereof;
- (f) the extent to which investigations have been conducted or actions have been taken for effective implementation of the said Act in Uttar Pradesh; and
- (g) whether any punitive action has been taken against any organization or individual under the said Act and if so, the details thereof?

## ANSWER

## MINISTER OF STATE FOR ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI JITIN PRASADA)

(a) to (g):  The Digital Personal Data Protection Act, 2023 (DPDP Act) provides for the processing of digital  personal  data  in  a  manner  that  recognises  both  the  rights  of  the  individual  to  protect  their personal data and the need to process such personal data for lawful purposes. The DPDP Act has been  enacted  on  11th  August  2023.  Ministry  has  notified  the  draft  DPDP  Rules,  2025  for  public consultation process which seek to operationalize the DPDP Act. Feedback comments from public including  stakeholders  have  been  invited  in  line  with  the  government's  commitment  of  inclusive approach towards law making.

DPDP Act obligates organizations involved in digital personal data processing to implement robust compliance measures including obtaining consent for specified purposes before lawful processing of digital personal data and respect for individual rights. The Act requires Data Fiduciaries to process personal  data  responsibly,  notify  breaches  promptly,  and  ensure  effective  observance  of  the provisions of the Act by implementing appropriate technical and organizational measures.

Moreover,  the  Act  empowers  individuals  with  the  rights  to  access,  correct  and  erase  her  digital personal data enhancing transparency about processing and usage of her personal data. Further, the DPDP  Act  obligates  to  establish  the  grievance  redressal  mechanism  and  sets  digital  by  design adjudication process through the Data Protection Board.

The DPDP Act establishes a robust framework of accountability mechanisms to ensure the lawful processing of digital personal data with Data Protection Board as an independent adjudicatory body empowered to investigate complaints, conduct inquiries, and impose penalties for non-compliance of the provisions of the Act.

********