{"id":17922,"date":"2025-01-06T07:42:42","date_gmt":"2025-01-06T02:12:42","guid":{"rendered":"https:\/\/www.naavi.org\/wp\/?p=17922"},"modified":"2025-01-06T07:44:08","modified_gmt":"2025-01-06T02:14:08","slug":"comments-on-dpdpa-rules-2-do-we-require-a-notification-for-section-44","status":"publish","type":"post","link":"https:\/\/www.naavi.org\/wp\/comments-on-dpdpa-rules-2-do-we-require-a-notification-for-section-44\/","title":{"rendered":"Comments on DPDPA Rules-2: Do we require a notification for Section 44 ?"},"content":{"rendered":"\n<p class=\"has-text-align-justify\">The DPDPA Rules contain two sets of rules. One set appliable  immediately on publication and another set for which separate dates will be notified.<\/p>\n\n\n\n<p class=\"has-text-align-justify\">The rules that will become immediately applicable namely Rules 1, 2 and  16 to 20 are related to <\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Short title and commencement and Definitions<\/li>\n\n\n\n<li>Establishment and functioning of the Data Protection Board<\/li>\n<\/ol>\n\n\n\n<p class=\"has-text-align-justify\">The other rules are related to the obligations. <\/p>\n\n\n\n<p class=\"has-text-align-justify\">There is however lack of clarity on  when will Section 44 of DPDPA 2023 be considered effective.<\/p>\n\n\n\n<p class=\"has-text-align-justify\">Section 44 is the section which addresses the amendments to ITA 2000 and RTI Act. This determines when the obligations  under Section 43A  of ITA 2000 will extinguish and penalties under Section 33 of DPDPA 2023 kick in. <\/p>\n\n\n\n<p class=\"has-text-align-justify\">Since there is no rule associated with either Section 33 or 44 of the DPDPA 2023, in the present set of rules, we need to await the next notification for this purpose probably within the 2 year limit which the Minister has indicated in his interview. <\/p>\n\n\n\n<p class=\"has-text-align-justify\">FDPPI  had presented a set of <a href=\"https:\/\/fdppi.in\/library\/2024\/comments_on_dpdpa_rules_2.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">comments on 5th August 2024 <\/a>based on the first draft of the rules then available in which we had made the  comment that this should be made effective after one year.<\/p>\n\n\n\n<p class=\"has-text-align-justify\">It is considered necessary that a separate rule or a notification should specify when Section 44 of the DPDPA 2023 becomes effective and it has to be synchronized with the notification of Section 33 of DPDPA 2023 on penalties.  <\/p>\n\n\n\n<p class=\"has-text-align-justify\">For this purpose, either a separate Rule 23 is added to the rules or  one more sub clause could be added in Rule 1 stating<\/p>\n\n\n\n<p>4. The sections 33 and 44 of DPDPA 2023 shall come into force with effect from &#8230;&#8230;&#8230;&#8230;&#8230;&#8230;..<\/p>\n\n\n\n<p class=\"has-text-align-justify\">If a separate Rule 23 is added, it can  also define the current and future role of the Adjudicator of ITA 2000 including a mention that the Adjudicator of ITA 2000 shall continue to be the authority to which a data principal affected by a personal data breach can apply for compensation under Section 43 of ITA 2000.<\/p>\n\n\n\n<p class=\"has-text-align-right\">Naavi<\/p>\n\n\n\n<ol class=\"wp-block-list\"><\/ol>\n","protected":false},"excerpt":{"rendered":"<p>The DPDPA Rules contain two sets of rules. One set appliable immediately on publication and another set for which separate dates will be notified. The rules that will become immediately applicable namely Rules 1, 2 and 16 to 20 are &hellip; <a href=\"https:\/\/www.naavi.org\/wp\/comments-on-dpdpa-rules-2-do-we-require-a-notification-for-section-44\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":0,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","_uag_custom_page_level_css":"","footnotes":""},"categories":[7],"tags":[],"class_list":["post-17922","post","type-post","status-publish","format-standard","hentry","category-cyber-law"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"post-thumbnail":false},"uagb_author_info":{"display_name":"Vijayashankar Na","author_link":"https:\/\/www.naavi.org\/wp\/author\/naavi\/"},"uagb_comment_info":0,"uagb_excerpt":"The DPDPA Rules contain two sets of rules. One set appliable immediately on publication and another set for which separate dates will be notified. The rules that will become immediately applicable namely Rules 1, 2 and 16 to 20 are &hellip; Continue reading &rarr;","_links":{"self":[{"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/posts\/17922","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/comments?post=17922"}],"version-history":[{"count":2,"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/posts\/17922\/revisions"}],"predecessor-version":[{"id":17924,"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/posts\/17922\/revisions\/17924"}],"wp:attachment":[{"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/media?parent=17922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/categories?post=17922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.naavi.org\/wp\/wp-json\/wp\/v2\/tags?post=17922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}