SHORT ANSWER:
The Information Technology Act 2000 addresses data protection and privacy through provisions related to the protection of sensitive personal data and the establishment of rules for data handling.
DETAILS:
- Section 43A mandates compensation for failure to protect sensitive personal data.
- The Act provides for the appointment of a Data Protection Authority (DPA) to oversee compliance.
- Rules for the collection, storage, and processing of personal data are outlined in the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
PUNISHMENT / IMPLICATIONS (if applicable):
- Failure to comply with data protection measures can lead to penalties and compensation claims.
SOURCE:
- Information Technology Act, 2000
Related Questions: