Consent-based framework with "deemed consent" for certain specified purposes - Rights of data principals: access, correction, erasure, grievance redressal, nomination of a representative - Obligations on data fiduciaries (India's term for data controllers) - Data Protection Board of India as the enf