Alerts & Updates 19th Mar 2026

‘Voluntarily’ provided personal data: How far can you go?

Authors

Parthsarathi JhaPartner | New Delhi | Noida
Ravisekhar NairPartner | Bengaluru
Aayushi SharmaPrincipal Associate | New Delhi | Noida

Latest Thought Leadership

Newsletter/Booklets 11th May 2026

Recent Developments in Direct & Indirect Tax

Read More
international trades
Newsletter/Booklets 8th May 2026

Trade Newsletter: April 2026

Read More
Alerts & Updates 7th May 2026

Clarification on Registration Requirements under the OSHWC Code, 2020 vis-à-vis the Maharashtra Shops and Establishments Act, 2017

Read More
Investment Funds
Alerts & Updates 7th May 2026

SEBI Introduces Fast-Track Mechanism for Processing of AIFs’ Placement Memorandums

Read More

In this week’s primer, we highlight the scope of ‘voluntarily’ provided personal data as a basis for processing, illustrating where individuals ‘actively’ and ‘voluntarily’ share personal data with a clear expectation of its use and where processing risks overstepping the line of this ‘legitimate use’. With key questions such as what qualifies as ‘voluntary’ versus ‘solicited’ personal data, businesses would be well advised to lean towards the ‘notice-and-consent’ approach.

For a brief overview of this ‘legitimate use’ and broad, indicative considerations for businesses, please read our full article here.

Privacy Policy

As per the rules of the Bar Council of India, lawyers and law firms are not permitted to solicit work or advertise. By clicking on the "I Agree" button, you acknowledge and confirm that you are seeking information relating to Economic Laws Practice (ELP) of your own accord and there has been no advertisement, personal communication, solicitation, invitation or any other inducement of any sort whatsoever by or on behalf of ELP or any of its members to solicit any work through this website.