Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Data Analytics

A company plans to run analytics on customer personal data to predict buying behaviour. Under India's Digital Personal Data Protection Act, 2023, which approach is consistent with the Act?

The consistent approach is to process personal data only for a lawful purpose, on valid consent or another permitted ground, and within the purpose notified to the individual. Being an analytics exercise or already holding the data does not exempt the company from these obligations, and unrestricted third-party sharing is not permitted.

  1. AProcess the data only for a lawful purpose, with valid consent or another permitted ground, and limit use to the stated purposeCorrect
  2. BProcess the data freely because analytics produces only aggregated insights
  3. CProcess the data without notice because the company already holds it
  4. DShare the data with any third party once analysis begins

Explanation

The Act requires personal data to be processed for a lawful purpose based on consent or a permitted legitimate use, with notice to the individual. Analytics intent does not exempt the company, and holding data does not remove notice and purpose obligations. Unrestricted sharing is not allowed.

Did you get it right without looking?

One question tells you little. A timed set on Data Analytics shows your real accuracy, how long you take and where you lose marks.

More Data Analytics questions