legalanswers.in logolegalanswers.in

Technology & Future Law

Cryptocurrency, Smart Contracts, and Web3 regulation.

Can I store Indian user data outside India?

Generally yes — the DPDP Act, 2023 permits cross-border data transfer to most countries (except notified 'negative list'). But sector-specific rules (RBI, SEBI, telecom) impose stricter localisation requirements.
Reference: DPDP Act, 2023; RBI Directions on Storage of Payment System Data, 2018; sector-specific guidelines (SEBI, IRDAI, TRAI)

What are the legal rules for flying drones in India?

Drones governed by Drone Rules, 2021 (and Drone (Amendment) Rules 2022, 2023). Categorised by weight (Nano, Micro, Small, Medium, Large). Register via DigitalSky portal (digitalsky.dgca.gov.in), get UIN. No-permission-no-takeoff (NPNT) compliance. Red, Yellow, Green zones based on airspace. Nano drones in Green zone exempt; others need Remote Pilot Licence + permissions.
Reference: Drone Rules, 2021 (as amended 2022, 2023); Aircraft Act, 1934; Digital Personal Data Protection Act, 2023; Bharatiya Nyaya Sanhita, 2023

What are the data breach notification obligations under India's Digital Personal Data Protection Act 2023?

Under the Digital Personal Data Protection Act, 2023 (DPDPA), a data fiduciary — any organisation that collects and processes personal data — must notify the Data Protection Board and every affected individual of a personal data breach. The notification must be given in the "prescribed manner" (rules to be notified by the government). Failure to notify is a civil default attracting a penalty of up to ₹200 crore per instance under Schedule 1 of the Act.
Reference: Digital Personal Data Protection Act, 2023 (Sections 2(t), 8(6), 18, Schedule 1); Information Technology Act, 2000 (Section 43A, superseded in part); MEITY DPDPA full text