All sections
Chapter 2 · Obligations of Data FiduciarySec. 4

Grounds for processing personal data

Statutory text

Personal data may be processed only for a lawful purpose for which (a) the principal has given consent, or (b) certain legitimate uses apply.

Read on MeitY (Ministry of Electronics & IT)
Plain-English commentary

Two-track lawful basis: consent (§6) OR legitimate use (§7). Drives the lawful_basis dropdown on every consent purpose.

lawful basisgrounds
Modules that handle this section