When can data be processed without consent under DPDP?
Section 7 lists legitimate uses such as specified state functions, compliance with law, medical emergencies, employment purposes, and certain publicly available data scenarios.
Legitimate use is narrow—do not treat it as a default alternative to consent for commercial marketing.
Document the legal basis for each processing activity in a register.