Question

Consider the following statements regarding Section 43A (Data Protection) of the IT Act, 2000: Statement 1: A body corporate has a statutory duty to implement reasonable security practices for personal data. Statement 2: Failure to protect personal data entitles the affected person to compensation up to Rs. 5 lakh. Statement 3: The duty under Section 43A applies only to companies handling personal data of more than 100,000 persons. Statement 4: A data breach due to force majeure (acts of God) exempts the body corporate from liability under Section 43A. Which statements are correct?

A Statements 1, 2, and 3 only
B Statements 1 and 2 only
C Statements 2 and 4 only
D Statements 1 only
E All statements are correct
Practice Next

Relevant for Exams:

Hey! Ask a query