DATA PRIVACY AND PROTECTION UNDER THE INFORMATION TECHNOLOGY ACT, 2000”

The present study aims to critically examine the concept of data privacy and data protection within the Indian legal framework, primarily focusing on the provisions of the Information Technology Act, 2000, along with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the recent legislative development, namely the Digital Personal Data Protection Act, 2023. The study seeks to analyse how these laws collectively regulate the collection, processing, storage, and protection of personal and sensitive data in an increasingly digital society.