UPSC Prelims Practice Questions — Constitution Bench to hear pleas against DPDP Act

Q1. Under the Digital Personal Data Protection Act, 2023, the term 'Data Fiduciary' refers to which one of the following?

  • A. Any individual whose personal data is being processed
  • B. Any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data
  • C. Any person who processes personal data on behalf of another person
  • D. The statutory regulator established to adjudicate breaches of personal data

Q2. With reference to the Digital Personal Data Protection (DPDP) Rules, 2025, consider the following statements: 1. The Rules were notified by the Ministry of Electronics and Information Technology in November 2025. 2. They provide for an eighteen-month phased compliance window for organisations. 3. They operationalise a fully digital Data Protection Board of India consisting of four members. 4. They fix the age of a 'child' under the DPDP framework at twelve years for the purpose of parental consent. Which of the above is/are correctly identified?

  1. The Rules were notified by the Ministry of Electronics and Information Technology in November 2025.
  2. They provide for an eighteen-month phased compliance window for organisations.
  3. They operationalise a fully digital Data Protection Board of India consisting of four members.
  4. They fix the age of a 'child' under the DPDP framework at twelve years for the purpose of parental consent.
  • A. 1, 2 and 3 only
  • B. 2 and 4 only
  • C. 1, 3 and 4
  • D. 1, 2, 3 and 4

Q3. Who headed the three-judge Bench of the Supreme Court that, in February 2026, referred petitions challenging Section 44(3) of the Digital Personal Data Protection Act, 2023 to a Constitution Bench?

  • A. Chief Justice D.Y. Chandrachud
  • B. Chief Justice Sanjiv Khanna
  • C. Chief Justice B.R. Gavai
  • D. Chief Justice Surya Kant

Q4. The pleas challenging the Digital Personal Data Protection Act, 2023 have been referred by the Supreme Court to a Constitution Bench consisting of how many judges?

  • A. Three
  • B. Five
  • C. Seven
  • D. Nine

Q5. With reference to the impact of the Digital Personal Data Protection Act, 2023 on the Right to Information Act, 2005, consider the following statements: 1. Prior to the amendment, Section 8(1)(j) of the RTI Act allowed disclosure of 'personal information' if the larger public interest justified such disclosure. 2. Section 44(3) of the DPDP Act, 2023 amended Section 8(1)(j) of the RTI Act, 2005. 3. The amendment to Section 8(1)(j) came into force immediately upon Presidential assent to the DPDP Act in August 2023, without any subsequent rule-making. Which of the statements given above is/are correct?

  1. Prior to the amendment, Section 8(1)(j) of the RTI Act allowed disclosure of 'personal information' if the larger public interest justified such disclosure.
  2. Section 44(3) of the DPDP Act, 2023 amended Section 8(1)(j) of the RTI Act, 2005.
  3. The amendment to Section 8(1)(j) came into force immediately upon Presidential assent to the DPDP Act in August 2023, without any subsequent rule-making.
  • A. 1 only
  • B. 1 and 2 only
  • C. 2 and 3 only
  • D. 1, 2 and 3