#consentmanagement

DPDP & Blockchain - Case Study 2 She withdrew consent. The nodes remembered anyway. Meera's hospital recorded her consent withdrawal correctly. However, six network nodes already held copies of her medical data — and none of them received a deletion instruction. Under Sections 6(4) and 8(2) of the DPDP Act, 2023, every node in a blockchain network may be a Data Processor. Each one needs a written contract. Each one must act on consent withdrawal. IS Audit 3.0 (ICAI) specifically identifies distributed data exposure as a blockchain risk. Governance must reach every node — not just the originating server. The compliance deadline is 13 May 2027.

DPDP 3.1.3 - Artificial Intelligence and DPDP Meena's Story: She Consented to Track Her Health. She Did Not Consent to Losing Her Insurance. A health-conscious professional finds her wearable data has reached an insurance aggregator's AI model — and her premium has tripled as a result. We examine how purpose-specific consent under Section 6(1), the Puttaswamy judgment's informational privacy doctrine, and Data Processor obligations under Rule 6(1)(f) govern what AI can and cannot do with health data. #DPDP #ArtificialIntelligence #AICompliance #DataPrivacy #DPDPCompliance #AIGovernance #ResponsibleAI #DigitalIndia #KarthikAndSunil

The DPDP Act 2023: Why Your Data Collection Needs a Hard Reset

Non Compliances and Penlaty..Beware! High Penalties for each non-compliance

All about Notice and Consent in DPDP Act, 2023

Digital Personal data of Indians collected by Foreign Entities

Data Breaches, Consequences, Action Required and Penalty