{"number":4,"title":"Grounds for processing personal data","slug":"section-4-grounds-for-processing-personal-data","chapter":2,"body":[{"type":"subsection","label":"(1)","text":"A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,—","children":[{"type":"clause","label":"(a)","text":"for which the Data Principal has given her consent; or"},{"type":"clause","label":"(b)","text":"for certain legitimate uses."}]},{"type":"subsection","label":"(2)","text":"For the purposes of this section, the expression “lawful purpose” means any purpose which is not expressly forbidden by law."}],"text":"(1) A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,—\n(a) for which the Data Principal has given her consent; or\n(b) for certain legitimate uses.\n(2) For the purposes of this section, the expression “lawful purpose” means any purpose which is not expressly forbidden by law.","commencement":{"date":"2027-05-13","notificationId":"gsr-843e-2025","phase":3},"definesTerms":["lawful purpose"],"references":{"sections":[],"rules":[]},"status":{"code":"upcoming","label":"Comes into force on 13 May 2027","short":"Upcoming","date":"2027-05-13"},"url":"https://dpdp.myndsolution.com/wiki/act/section-4-grounds-for-processing-personal-data/","markdown":"- **(1)** A person may process the personal data of a Data Principal only in accordance with the provisions of this Act and for a lawful purpose,—\n  - **(a)** for which the Data Principal has given her consent; or\n  - **(b)** for certain legitimate uses.\n\n- **(2)** For the purposes of this section, the expression “lawful purpose” means any purpose which is not expressly forbidden by law.\n\n"}