Lawful Processing: Consent, Legitimate Uses and Employment-Related Processing
Description
Explains when consent is required, what valid consent looks like under the DPDP Act, in which situations organisations can rely on legitimate uses instead of consent, and how these rules apply to common employment and HR scenarios.
Learning Objectives
After completing this subject, learners will be able to describe the legal basis for processing digital personal data under the DPDP Act in clear, non-technical language. They will be able to distinguish between consent-based processing and specified legitimate uses, including processing for employment-related purposes and compliance with law. Learners will also be able to recognise typical HR, payroll, monitoring and performance management activities where explicit consent may not be required, and identify edge cases where fresh, specific consent is still needed. They will understand their role in implementing practical, DPDP-compliant notice and consent flows and in respecting consent withdrawals.