UPSC Prelims Practice Questions — SC questions WhatsApp, Meta on personal data

Q1. With reference to the Digital Personal Data Protection (DPDP) Rules, 2025, consider the following statements: Which of the above is/are NOT correct?

  1. The DPDP Rules, 2025 were notified by the Central Government on 14 November 2025.
  2. Appeals against decisions of the Data Protection Board of India lie to the National Company Law Appellate Tribunal (NCLAT).
  3. The Data Protection Board of India is to consist of four members and function in a fully digital mode.
  4. The Rules introduce an eighteen-month period for phased compliance by data fiduciaries.
  • A. 1 only
  • B. 1 and 3
  • C. 2 only
  • D. 2 and 4

Q2. With reference to the proceedings arising out of WhatsApp's 2021 Privacy Policy, consider the following statements: Which of the statements given above is/are correct?

  1. The Competition Commission of India (CCI), in its November 2024 order, both imposed a monetary penalty of Rs 213.14 crore on Meta and barred WhatsApp from sharing user data with other Meta group entities for advertising purposes for five years.
  2. The National Company Law Appellate Tribunal (NCLAT) subsequently upheld the CCI's monetary penalty but set aside the five-year ban on data sharing.
  3. Appeals against orders of the Data Protection Board of India under the DPDP Rules, 2025 will lie to the same tribunal that hears appeals from CCI orders.
  • A. 1 and 2 only
  • B. 2 and 3 only
  • C. 1 and 3 only
  • D. 1, 2 and 3

Q3. Under the Digital Personal Data Protection Act, 2023, the term 'Data Fiduciary' refers to:

  • A. the individual to whom the personal data relates
  • B. any person who alone or in conjunction with others determines the purpose and means of processing of personal data
  • C. any person who processes personal data only on behalf of, and on the instructions of, another entity
  • D. a Government-appointed officer responsible for adjudicating complaints regarding personal data breaches

Q4. Under the Digital Personal Data Protection Rules, 2025, the Data Protection Board of India is to consist of how many members?

  • A. Three
  • B. Four
  • C. Five
  • D. Seven

Q5. The administration of the Digital Personal Data Protection Act, 2023 has been entrusted to which one of the following Union Ministries?

  • A. Ministry of Home Affairs
  • B. Ministry of Law and Justice
  • C. Ministry of Information and Broadcasting
  • D. Ministry of Electronics and Information Technology