Trending
Become an Official IPU Member and Strengthen Your Voice in Media
तुरंत रजिस्टर करें – Indian Press Union के साथ जुड़कर अपनी आवाज़ को मजबूत बनाएं!
स्वतंत्र पत्रकारों को सुरक्षा और पहचान के लिए एकजुट होने की सलाह
हर मीडिया प्रोफेशनल के लिए IPU Membership क्यों बन रही जरूरत
Follow Us :
June 10, 2026

Indian Press Union (IPU) is a national media organization committed to ethical journalism, press awareness, and responsible reporting in the interest of the nation. It upholds the dignity of journalism and the constitutional role of media in strengthening democracy and desh hit.

Get In Touch

LATEST NEWS

DPDP Act – Employee Perspective

  • April 20, 2026
  • 2 Mins

PART 1: From the Ex-Employee’s Perspective
(Accessing personal emails & WhatsApp chats from a surrendered office laptop)
1. Core Legal Principle

Under the DPDP Act, any data that identifies an individual = Personal Data, regardless of whether it is stored on:

a personal device, or
an office-issued device

👉 Therefore, personal emails and WhatsApp chats remain the employee’s personal data, even if accessed from a company laptop.

2. What the Organization Has Potentially Done Wrong

If the organization accesses:

personal Gmail / Outlook accounts
WhatsApp Web sessions
saved credentials / cached chats

👉 without explicit consent, it may amount to:

(a) Unauthorized Processing of Personal Data

Violation of DPDP Act principles:

Lawful purpose missing
Consent not obtained
Purpose limitation breached
(b) Breach of Privacy & Confidentiality

Even if the laptop belongs to the company:

👉 Personal data ≠ Company data

Accessing such data can be treated as:

Intrusion into privacy
Misuse of digital identity
(c) Offences under IT Act, 2000

Relevant sections:

Section 43 – Unauthorized access / data extraction
Section 66 – Computer-related offences (if done dishonestly)
Section 72 – Breach of confidentiality and privacy

👉 This can elevate the matter from civil violation → criminal liability

3. How Grievous Is This? (Severity Analysis)
Legally
Moderate to severe violation, depending on intent and misuse
If data is copied/shared → becomes highly severe
Financial Exposure (DPDP Act)
Penalties can go up to ₹250 crore (organization-level, depending on severity and scale)
Reputational & Ethical
High reputational damage
Loss of employee trust
Potential litigation
4. Key Insight (Very Important)

👉 Even if:

the employee forgot to log out
or data was cached

The organization STILL does not get automatic rights to access personal data.

5. Practical Interpretation

This situation reflects:

Lack of data governance controls
Absence of exit protocols
Possible intentional or negligent misuse

RAVIBHUSHAN RAMESHCHANDRA VERMA

District Reporter

Breach of Impartiality by Certification Body
Previous Post

241 Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

INDIAN PRESS UNION

Indian Press Union (IPU) A National Platform for Journalists and Media Professionals.

Legal Terms

Get Help

Follow us On

© 2026 All Rights Reserved IPU MEDIA ASSOCIATION

BECOME A MEMBER