DATA D EBATE

Some of the issues that the forthcoming law on data privacy will need to address:

Definition of information ‘sensitive and private’ Levels of sensitivity such information of

What constitutes allowing ‘legitimate interest’ parties information to access such

Whether thrust of the law should be ‘rights-based’ or ‘protection-based’

Whether the law should be principle-based or rule-based Limits of access and use of data by companies even after getting ‘consent’ rights

Whether encryption of data should be mandatory and the level of encryption needed for different sectors

Whether servers storing Indian data should be stored only in India Powers of the regulator likely to be set up to monitor data privacy