Central Act
4
Section 4. Grounds for processing personal data.
The Digital Personal Data Protection Act, 2023.
In forceAll India (Central Act)
4. Grounds for processing personal data. (1) A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,--- (a) for which the Data Principal has given her consent; or (b) for certain legitimate uses. (2) For the purposes of this section, the expression "lawful purpose" means any purpose which is not expressly forbidden by law.