Data Protection laws and the Growth of MSME in India: An Analysis of the Digital Personal Data Protection Act, 2023

Abstract

Abstract: Micro, Small and Medium Enterprises (MSMEs) have become one of the most critical pillars of the Indian economy. They create employment, promote innovations, produce exportable goods, and make a significant contribution to the country’s Gross Domestic Product (GDP). In the era of digitisation and increased technological development, enterprises store and process a lot of personal data of their employees, customers, suppliers, and other stakeholders. In addition, personal data is increasingly used in day-to-day business activities. Therefore, it is necessary to ensure the security of personal data processed by MSMEs. Digital Personal Data Protection Act, 2023 became the first data protection law in India, which regulates processing activities of digital personal data. The law aims to protect the rights of data principals. Moreover, data protection laws can bring a wide range of benefits to MSMEs, such as increased customer trust and business opportunities. However, MSMEs, especially those with limited resources, may encounter several challenges in accordance with the new legislation. This paper discusses the impact of legal provisions on the development of MSMEs in India with a focus on data protection regulations. It highlights the importance of data protection for MSMEs, which are key economic players in many countries, and points out the need for support in terms of legal and technical capabilities.