Alerts & Updates 19th Mar 2026

‘Voluntarily’ provided personal data: How far can you go?

Authors

Parthsarathi JhaPartner | New Delhi | Noida
Ravisekhar NairPartner | Bengaluru
Aayushi SharmaPrincipal Associate | New Delhi | Noida

Latest Thought Leadership

Investment Funds
Alerts & Updates 15th Jun 2026

Draft VCC Structure For GIFT-IFSC Published by the DEA – An Analysis

Read More
Data Privacy
Alerts & Updates 11th Jun 2026

The DPDPA’s Enforcement Gap – Limited Remedies for Data Principles and Independence of the DPB

Read More
Investment Funds
Alerts & Updates 11th Jun 2026

Trade Newsletter – May 2026

Read More
Investment Funds
Alerts & Updates 10th Jun 2026

IFSC Newsletter – May 2026

Read More

In this week’s primer, we highlight the scope of ‘voluntarily’ provided personal data as a basis for processing, illustrating where individuals ‘actively’ and ‘voluntarily’ share personal data with a clear expectation of its use and where processing risks overstepping the line of this ‘legitimate use’. With key questions such as what qualifies as ‘voluntary’ versus ‘solicited’ personal data, businesses would be well advised to lean towards the ‘notice-and-consent’ approach.

For a brief overview of this ‘legitimate use’ and broad, indicative considerations for businesses, please read our full article here.

Privacy Policy

As per the rules of the Bar Council of India, lawyers and law firms are not permitted to solicit work or advertise. By clicking on the "I Agree" button, you acknowledge and confirm that you are seeking information relating to Economic Laws Practice (ELP) of your own accord and there has been no advertisement, personal communication, solicitation, invitation or any other inducement of any sort whatsoever by or on behalf of ELP or any of its members to solicit any work through this website.