Understanding 'Legal Obligation' as a Ground for Data Processing under DPDPA 2023

he rise of technological infrastructure has developed the cyberworld, where information acts as the heartbeat of this world. In every fraction of a second, data is uploaded, stored, analyzed, and processed. The emergence of cyberspace has an indispensable impact our real world. We have lost track of how much cyberspace knows about us and how much of our data is widely shared and analyzed. Once data is entered into cyberspace, it travels at lightning speed, leaving us with little control over it. It often feels as though our personal information ceases to be ours, becoming accessible and readable by anyone. This results in a loss of control, privacy, and security over our data. With such plethora of identifiable information available, questions arise about whether this excessive sharing and analysis of data poses a threat. India has introduced the Data Protection and Digital Privacy (DPDP) Act of 2023 to answer the question of data threats. This legislation aims to address these risks by filling gaps in data protection and securing the processing of personal information. Additionally, it assists in erasing digital footprints, thereby enhancing control over one’s data.