Legitimate Use Under The Digital Personal Data Protection Act, 2023 – Decoding The Employment Puzzle

The Digital Personal Data Protection Act, 2023 ("Act"), after many iterations, has come as a breath of fresh air and marks the beginning of a fresh era that demands the implementation of a more robust safeguarding of digital personal data. The Act has immediately made its impact being felt across the industry and represents a departure from the existing lenient data protection requirements, which impose minimal consequences for non-compliance.

Regardless of the industry that any organization operates in, it will regularly need to handle and safeguard personal data of employee as a basic requirement. While the Act is yet to come into effect, all organizations need to utilize this transitioning phase to revaluate their internal processes established for protection of their employee data and work towards adapting the new changes (including within their existing policies) to be prepared when the Act comes into effect.