Alerts & Updates 19th Mar 2026

‘Voluntarily’ provided personal data: How far can you go?

Authors

Parthsarathi JhaPartner | New Delhi | Noida
Ravisekhar NairPartner | Bengaluru
Aayushi SharmaPrincipal Associate | New Delhi | Noida

Latest Thought Leadership

international trades
Alerts & Updates 30th Apr 2026

India – New Zealand Free Trade Agreement

Read More
Podcasts 30th Apr 2026

ELP Podcast Series: Directors and the Law — An Insider’s View

Read More
Alerts & Updates 29th Apr 2026

Verifiable consent for processing personal data of children under the DPDP Act

Read More
Alerts & Updates 27th Apr 2026

IMPACT OF THE 2026 AMENDMENT TO TRANSGENDER ACT ON EMPLOYERS AND EMPLOYEES

Read More

In this week’s primer, we highlight the scope of ‘voluntarily’ provided personal data as a basis for processing, illustrating where individuals ‘actively’ and ‘voluntarily’ share personal data with a clear expectation of its use and where processing risks overstepping the line of this ‘legitimate use’. With key questions such as what qualifies as ‘voluntary’ versus ‘solicited’ personal data, businesses would be well advised to lean towards the ‘notice-and-consent’ approach.

For a brief overview of this ‘legitimate use’ and broad, indicative considerations for businesses, please read our full article here.

Privacy Policy

As per the rules of the Bar Council of India, lawyers and law firms are not permitted to solicit work or advertise. By clicking on the "I Agree" button, you acknowledge and confirm that you are seeking information relating to Economic Laws Practice (ELP) of your own accord and there has been no advertisement, personal communication, solicitation, invitation or any other inducement of any sort whatsoever by or on behalf of ELP or any of its members to solicit any work through this website.