UPSC Prelims Practice Questions — Delhi HC seeks Centre’s reply on plea against new data law

Q1. Which one of the following is the statutory body established as the principal adjudicating authority for digital personal data protection in India?

  • A. Data Protection Authority of India
  • B. Data Protection Board of India
  • C. Cyber Appellate Tribunal
  • D. National Data Governance Framework Council

Q2. As per the Digital Personal Data Protection Act, 2023 read with the DPDP Rules, 2025, what is the total strength of the Data Protection Board of India including its Chairperson?

  • A. Three
  • B. Five
  • C. Seven
  • D. Nine

Q3. The Data Protection Board of India, whose constitution is currently under challenge before the Delhi High Court, is established under which section of the Digital Personal Data Protection Act, 2023?

  • A. Section 8
  • B. Section 17
  • C. Section 18
  • D. Section 44

Q4. With reference to the writ petition on which the Delhi High Court issued notice to the Centre in February 2026, consider the following provisions of the Digital Personal Data Protection Act, 2023: 1. Section 17, dealing with exemptions for instrumentalities of the State from compliance with the Act. 2. Section 37, empowering the Central Government to block public access to information generated by a Data Fiduciary. 3. Section 44, by which Section 8(1)(j) of the Right to Information Act, 2005 stands amended. 4. Section 12, which fixes the minimum age for valid digital consent at twenty-five years. Which of the above are correctly identified as provisions challenged in the petition?

  1. Section 17, dealing with exemptions for instrumentalities of the State from compliance with the Act.
  2. Section 37, empowering the Central Government to block public access to information generated by a Data Fiduciary.
  3. Section 44, by which Section 8(1)(j) of the Right to Information Act, 2005 stands amended.
  4. Section 12, which fixes the minimum age for valid digital consent at twenty-five years.
  • A. 1 and 2 only
  • B. 1, 2 and 3
  • C. 2, 3 and 4
  • D. 1, 3 and 4

Q5. Under the Digital Personal Data Protection Act, 2023, the expression 'Data Fiduciary' is defined as:

  • A. The individual to whom the personal data relates and who exercises rights of consent and erasure under the Act.
  • B. Any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data.
  • C. Any person who processes personal data on behalf of another person under a contract or arrangement.
  • D. The statutory authority that adjudicates disputes between data subjects and platforms under the Act.