Welfare delivery links identity, eligibility and benefit data for vulnerable people.
In short
The Act allows legitimate-use processing for these functions, but the sensitivity and scale demand strong security, purpose limits and careful handling. Penalties reach ₹250 crore.
What changes for this sub-sector.
Eligibility, benefit and often health or financial data is personal data with real sensitivity.
Processing to deliver a subsidy or benefit can rely on legitimate-use grounds.
Scheme data collected for one benefit cannot be freely reused for another.
Protect the data of vulnerable people with strong safeguards.
Provide access, correction and a grievance route where not exempt.
Inter-agency sharing and delivery vendors need a lawful basis and contracts.
Fix lawful basis and security for sensitive data first.
The readiness check maps basis, purpose and security gaps.
Take the readiness check →