VIEWS OF THE COMMITTEE

Authoritymay conduct investigations; collect data; adjudicate disputes; monitor cross-border data transfer An individual should first approach the data controller for any data breach, then the authority Authoritymay be given the powers to impose civil penalties, order defaulter to pay compensation Foreign entity that offers goods or services in the country may be covered under the law Proposed lawmay not be extended to include data relating to companies and other juristic entities Data from which an individual is identified or reasonably identifiable may be considered personal data Health, genetic, religious beliefs, financial, sexual orientation be treated as sensitive personal data Exemption may be provided for data processed for journalistic/artistic, literary, academic, research purposes Lawmay provide exemptions for data collected for investigation of a crime, and to maintain national security and public order A variable age limit can be drawn (not necessarily 18) below which parental consent is to be mandatory