The Necessity of Data Protection Laws in the Real Estate Sector
In the digital age, the real estate industry is increasingly moving online. This shift highlights the importance of data protection to safeguard personal information. The Digital Personal Data Protection Act of 2023 (DPDPA) introduces stringent measures t
Real EstateData ProtectionDpdpaCompliancePrivacyReal Estate NewsOct 24, 2024
The DPDPA introduces substantial changes in compliance requirements, data handling practices, and potential legal implications for data fiduciaries, data principals, and data processors. It proposes to repeal Sections 43A and 87(2)(b) of the Information Technology Act, 2000, and replace them with Section 44(2) of the DPDPA. This will also lead to the repeal of the IT (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, which currently govern the collection and handling of personal information in India.
In the context of real estate, a data fiduciary refers to real estate firms and portals such as Housing.com, Magicbricks, and Justdial. Data principals are individuals such as home buyers, renters, property sellers, landlords, agents, brokers, developers, and builders whose data is collected with their consent. A data processor can be any third-party software as a service company or in-house programming teams of the data fiduciary.
Compliance RequirementsThe landmark Puttaswamy judgement has influenced the DPDPA by incorporating baseline principles of privacy such as consent, lawful and transparent use of personal data, purpose limitation, data minimisation, data accuracy, storage limitation, reasonable security safeguards, and accountability.
Lawful and Transparent Notice for ConsentReal estate companies must explicitly obtain consent from data principals, providing clear privacy notices in multiple languages. They are required to store proof of consent in a retrievable manner and inform data principals of the purpose, type, and intended use of the data. For example, if a student named X registers with JustDial’s mobile app to find rental properties in South Delhi, they must be informed about the personal information that will be collected, such as their location, phone number, and Google profile.
Fit-for-Purpose ApproachReal estate companies must limit data processing to what is necessary for specific purposes. For instance, if a homebuyer X downloads a housing portal app Y, it should only collect and process data that is relevant to the purpose, such as the user's location, and not their contact list, if it is not needed.
Right to be ForgottenData principals have the right to have their data corrected or erased. If a renter no longer wishes to list their property on Housing.com, all associated data should be erased upon request.
The Real Estate Regulatory Authority (RERA) mandates transparency and accountability in real estate transactions involving personal data. The DPDPA’s stringent data protection requirements complement RERA’s transparency goals by ensuring that personal data is handled securely. Non-compliance can result in adjudication and penalties as outlined in Schedule I of the DPDPA.
Impact and ChallengesThe implementation of the DPDPA will enhance data protection and accountability in the real estate sector. However, it also presents several challenges. Real estate companies will need to update their data handling systems and adopt state-of-the-art data protection solutions. This may require the establishment of compliance teams, leading to increased financial and technological burdens, especially for smaller enterprises.
Moreover, the DPDPA holds data fiduciaries responsible even when data processing is outsourced, which can further increase operational expenses. Despite these challenges, companies must implement strong data protection measures and comply with the DPDPA provisions to uphold the rights of all stakeholders.
ConclusionThe DPDPA is a crucial step towards ensuring data privacy in the real estate sector. While it introduces new compliance requirements and potential challenges, it also offers significant benefits by enhancing data security and accountability. Real estate companies must adapt to these changes to operate effectively in the digital age.
Frequently Asked Questions
What is the Digital Personal Data Protection Act of 2023 (DPDPA)?
The Digital Personal Data Protection Act of 2023 (DPDPA) is a legislation in India that provides a framework for the protection of personal data. It introduces stringent measures to ensure data privacy and accountability for both physical and digital entities.
Who are considered data fiduciaries in the real estate context?
Data fiduciaries in the real estate context include real estate firms, portals such as Housing.com and Magicbricks, and websites like Justdial. These entities are responsible for collecting and processing personal data.
What are the key compliance requirements under the DPDPA for real estate companies?
Key compliance requirements under the DPDPA include obtaining explicit consent from data principals, providing clear privacy notices, limiting data processing to specific purposes, and ensuring the right to be forgotten.
What are the challenges real estate companies might face with the implementation of the DPDPA?
Challenges include updating data handling systems, adopting state-of-the-art data protection solutions, and establishing compliance teams, which can lead to increased financial and technological burdens, especially for smaller enterprises.
How does the DPDPA complement the Real Estate Regulatory Authority (RERA)?
The DPDPA complements RERA by enhancing data protection and transparency in real estate transactions. It ensures that personal data is handled securely, aligning with RERA's goals of transparency and accountability.
Related News Articles
Indian Realty Giants Unload Properties Worth Rs 1.17 Lakh Crore in FY24
Leading real estate companies in India, such as Macrotech Developers and Signature Global, have sold properties worth a staggering Rs 1.17 lakh crore in FY24.
Soaring Demand Drives Up Property Prices in Delhi-NCR and MMR
Average housing prices in Delhi-NCR and Mumbai Metropolitan Region (MMR) have risen by nearly 50% in the last five years, driven by higher demand and infrastructural developments.
Aditya Birla Real Estate: Pune Launch on the Cards, Expanding in Thane and Sarjapur
In a recent post-earnings call, the management of Aditya Birla Real Estate Ltd, formerly known as Century Textiles and Industries Ltd, announced the upcoming launch of a new project in Pune, along with plans to expand in Thane and Sarjapur.
ACRES 2025 Showcases Over 400 Property Projects in Egypt Pavilion
Organised by the Sharjah Chamber of Commerce and Industry (SCCI) in collaboration with the Sharjah Real Estate Registration Department (SRERD), the ACRES 2025 event is set to feature an extensive array of property projects from Egypt, highlighting the cou
The 23-Year Journey: How a UP Man Purchased Dawood Ibrahim’s Mumbai Shop
Hemant Jain took a significant risk in 2001 by purchasing a Mumbai shop linked to Dawood Ibrahim. Despite numerous bureaucratic obstacles, he finally managed to register the property after a grueling 23-year battle.
What Are the Top 20 Expectations for the Budget 2025-26?
As the Union Budget 2025-26 approaches, scheduled to be presented by Finance Minister Nirmala Sitharaman on February 1 (Saturday), the real estate industry and other sectors are bracing for significant changes and potential boosts. Here’s a detailed look