LEGAL FRAMEWORK GOVERNING AI AND DATA PROTECTION
AUTHOR – ANSA ELCY ALEX, STUDENT AT AMITY LAW SCHOOL
BEST CITATION – ANSA ELCY ALEX, LEGAL FRAMEWORK GOVERNING AI AND DATA PROTECTION, INDIAN JOURNAL OF LEGAL REVIEW (IJLR), 5 (5) OF 2025, PG. 598-604, APIS – 3920 – 0001 & ISSN – 2583-2344
ABSTRACT
Digital Personal Data Protection Act (DPDP Act): A New Era for DataProtection in India
The DPDP Act (Digital Personality Personal Data Protection), 2023,represents an important step in regulating data protection in the country.The aim is to protect individual personal data and at the same time,ensuring that advances in businesses and technological developments,including artificial intelligence (AI), can thrive responsibly. In contrast tothe European Union’
General Data Protection Ordinance (GDPR), whichincludes detailed guidelines for AIrelated data processing, the DPDP Actis not explicitly mentioned. However, principles and obligations apply toAIcontrolled data processing, which presents important legal andregulatory challenges.In 2022, the Indian government introduced the Digital Personal DataProtection Act (DPDP Act), a comprehensive law to protect the personaldata of Indian citizens. The law is a major change in India’s approach todata protection, highlighting the need for transparency, accountabilityand user consent[1]The DPDP Act determines several important provisions that must becompliant with the organization that processes personal data. TheseincludeMemos and Approvals: Organizations must clearly and accurately notifyyou of a clear and accurate notice of the collection and use of personaldata and obtain consent before processing such data.[2]
Minimizing Data: Organizations simply collect and process personal datanecessary for the purposes specified in the communication.[3]– Data Protection according to Draft and Standard Settings:Organizations must implement data protection principles and protectionmeasures throughout the lifecycle of their personal data and ensure thatthe standard settings for products and services are privacy.[4]
[1] Digital personal data protection act , 2022 (india )
[2] Digital personal data protection act , 2022 (india )section 5
[3] Digital personal data protection act , 2022 (india )section 6
[4] Digital personal data protection act , 2022 (india )section 7