Employee privacy is principally governed by the Information Technology Act, 2000, which deals with sensitive personal data or information, and by the Digital Personal Data Protection Act (which has been enacted but has not come into force) aimed at strengthening data protection.