Section 7: Certain Legitimate Uses
Chapter: Obligations of Data Fiduciary
Overview
Lists situations where data can be processed without consent. This section falls under the "Obligations of Data Fiduciary" chapter of the Digital Personal Data Protection Act 2023, which was enacted to establish a comprehensive framework for data protection in India.
Key Points of Section 7
- Certain legitimate uses allow processing without consent — state functions, legal obligations, employment purposes
- Medical emergencies and public interest processing are permitted without consent
- Processing of publicly available data does not require consent
Who This Applies To
Government bodies, employers, healthcare providers, and entities processing public data
Compliance Action Steps
- Identify which legitimate use categories apply to your processing
- Document the legal basis for each non-consent processing activity
- Maintain records of legitimate use determinations
How Complynz Helps
Complynz automates compliance with Section 7 through AI-powered assessments, policy templates, and continuous monitoring. Our platform maps each DPDP provision to actionable controls so your team can achieve and maintain compliance efficiently.
Take Free DPDP Assessment | DPDP Compliance Checklist | View Pricing