DPDP Glossary

Purpose

The lawful purpose for which personal data is processed; consent is purpose-linked and certain legitimate uses are also provided.

Sections 4, 6 and 7

What it means

Section 4 allows processing only for a lawful purpose — with consent or for certain legitimate uses. A lawful purpose is one not expressly forbidden by law. Section 6 ties consent to a specified purpose. Section 7 lists legitimate uses that can proceed without consent under Section 4. Purpose specificity is structural, not decorative.

Worked example

Collecting phone numbers “for account security OTP” and later using the same numbers for promotional WhatsApp blasts without a matching consent purpose (or other valid basis) breaks purpose linkage. Two purposes need two clear bases — not one vague “service communications” umbrella.

In practice

Maintain a purpose catalogue aligned to notices and consent records. Decide per activity: Section 6 consent or a listed Section 7 use. ConsentifyAI does not market a separate statutory “Purpose Registry.”

Purpose Under DPDP →

Source

Sections 4, 6 and 7 · Official text (PDF)

Educational summary based on the Digital Personal Data Protection Act, 2023 and Rules, 2025. Not legal advice.

Further reading

ConsentA free, specific, informed, unconditional and unambiguous agreement, given by clear affirmative action, to process personal data for a specified purpose.Legitimate UseCertain legitimate uses listed in Section 7 for which personal data may be processed without consent under Section 4.Data FiduciaryAny person who alone or with others determines the purpose and means of processing of personal data.

← Back to glossary