Alerts & Updates 19th Mar 2026

‘Voluntarily’ provided personal data: How far can you go?

Authors

Parthsarathi JhaPartner | New Delhi | Noida
Ravisekhar NairPartner | Bengaluru
Aayushi SharmaPrincipal Associate | New Delhi | Noida

Latest Thought Leadership

international trades
Alerts & Updates 22nd May 2026

U.S. OFAC Enforcement – Adani Enterprise Limited

Read More
Newsletter/Booklets 22nd May 2026

Recent Developments in Direct & Indirect Tax

Read More
Alerts & Updates 22nd May 2026

Consent Manager under the DPDP Act: A New Institutional Layer for India’s Data Protection Regime

Read More
Investment Funds
Alerts & Updates 20th May 2026

Pledging of securities of Non-Discretionary Portfolio Management Services clients – Informal Guidance by SEBI

Read More

In this week’s primer, we highlight the scope of ‘voluntarily’ provided personal data as a basis for processing, illustrating where individuals ‘actively’ and ‘voluntarily’ share personal data with a clear expectation of its use and where processing risks overstepping the line of this ‘legitimate use’. With key questions such as what qualifies as ‘voluntary’ versus ‘solicited’ personal data, businesses would be well advised to lean towards the ‘notice-and-consent’ approach.

For a brief overview of this ‘legitimate use’ and broad, indicative considerations for businesses, please read our full article here.

Privacy Policy

As per the rules of the Bar Council of India, lawyers and law firms are not permitted to solicit work or advertise. By clicking on the "I Agree" button, you acknowledge and confirm that you are seeking information relating to Economic Laws Practice (ELP) of your own accord and there has been no advertisement, personal communication, solicitation, invitation or any other inducement of any sort whatsoever by or on behalf of ELP or any of its members to solicit any work through this website.