Data localisation is not the only answer

India’s data protection regime must balance the needs of people and businesses

The government has asked American e-commerce major, Amazon, to set up a server in India in an attempt to prevent the unchecked migration of personal customer data. The last few months have seen an increase in demands for data localisation, with even the Reserve Bank of India calling for local storage of financial data. Although there is no law in India regarding data safety at present, the government is working on evolving a data protection framework. On July 27, after year-long public consultations, a committee of experts headed by former Supreme Court judge, BN Srikrishna, submitted its report on the principles that will guide the framing of India’s data protection statute. The draft bill has been put up for public consultation till September 5, after which it is likely to be sent for parliamentary approval.

According to the recommendations of the Srikrishna report, all personal data of Indian citizens must have at least one copy saved in India. Eight of the 10 most accessed websites in India are owned by US entities, says the report. To begin with, foreign e-commerce companies will be asked to set up servers in India, so that the personal data of customers, generated through e-commerce operations, stays within the country. The votaries of data localisation say it will facilitate easier access for law enforcement agencies for the purposes of investigation and prosecution. Those who criticise data localisation argue that it can hurt the economy and may create a fragmented Internet that goes against the intrinsic character of the Web as a borderless medium.

Even as the government appears to have made up its mind to go ahead with stronger data localisation norms, experts say a majority of Indian businesses might not have the technical wherewithal and resources to set up local clouds. Any final stand on stringent data localisation norms may ultimately have to take the middle path and balance the interests of the State, the people and businesses.