Lesson 1.1: Why India needs a data protection law

Module 1 · Lesson 1.1 of 8 · About 20 minutes · Why India needs a data

Before learning the rules, understand the problem they solve. This lesson walks through how India moved from scattered rules to a dedicated privacy law. This DPDPA 2023 course page explains why india needs a data in plain language.

why india needs a data - DPDPA 2023 course lesson banner
Advertisement

What you will learn about why india needs a data

  • Explain why privacy became a fundamental right in India
  • Trace the road from the IT Act to the DPDP Act, 2023
  • Describe the harms the law is meant to prevent

The problem in plain words (why india needs a data)

Every app, shop, bank, school and clinic now collects names, phone numbers, locations and habits. Without rules, that data can be sold, leaked or misused, and the person it belongs to often never knows. A data protection law gives people control and makes organisations accountable.

Click each step of the journey

Select a numbered box to read what happened.

12000IT Act22011SPDI Rules32017Puttaswamy42018Committee52019-22Bills62023The Act72025The Rules8TodayCompliance
Tap or click a step to see exactly what to do.
Advertisement

Harms the law targets (why india needs a data)

HarmEveryday example
Unwanted profilingAn app builds a detailed profile from your purchases and sells it
Data breachA customer database is leaked and used for phishing
Spam and fraudYour number, shared without your knowledge, gets scam calls
Loss of controlYou cannot find out who holds your data or ask for it to be deleted
Harm to childrenA game tracks a child and shows targeted ads

Activity (5 minutes)

Write down three apps you used today. For each, note what personal data it probably holds. You will use this list in Lesson 1.8.

Key takeaway: The DPDP Act exists because privacy is a fundamental right and the older IT Act regime was too thin to protect it.

Check your understanding of why india needs a data

Q1. Which decision recognised privacy as a fundamental right?

Q2. Which provision of the IT Act earlier dealt with compensation for failure to protect sensitive data?

Q3. When did the DPDP Act, 2023 receive assent?

Educational material for learning purposes, not legal advice. Check the official text of the DPDP Act, 2023, the DPDP Rules, 2025 and MeitY notifications for the latest position.

Official sources for why india needs a data: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.