The Data Protection Bill, 2018 (“Bill”) mandates the lawful processing of personal data, whereby any personal data may be processed by an entity only on the basis of grounds specifically provided by the Bill.

In this Statutory Gyan, we summarise the permissible grounds for processing personal data under the Bill and the penalties for their non-compliance.

Please do share your feedback with Namrata Bhagwatula ( and Nikita Tanwar (



Image credits: Agreement by Anna Sophie from the Noun Project, Government by Yu luck from the Noun Project, Law by riyanto r from the Noun Project, court by Massupa  Kaewgahya from the Noun Project, emergency by Logan from the Noun Project, Job applicant by Creative Mania from the Noun Project, Due Diligence by Gregor Cresnar from the Noun Project




Disclaimer: This post has been prepared for informational purposes only. The information/or observations contained in this post does not constitute legal advice and should not be acted upon in any specific situation without seeking proper legal advice from a practicing attorney.