WHERE IT FAILS…

DOES NOT ANSWER WHO OWNS PERSONAL DATA

NO RIGHT TO ERASE DATA UNDER RIGHT TO FORGET

DATA BREACH TO BE REPORTED TO DATA AUTHORITY RATHER THAN CONSUMER

STATES DATA CAN BE SENT TO FOREIGN SHORES

INDIAN DATA IN FOREIGN COUNTRIES IS A SECURITY RISK

INDIVIDUALS CAN BE SUED FOR WITHDRAWING CONSENT

LENIENT PROVISIONS, LOW PENALTY THRESHOLD OF ` 5 CRORE, ` 15 CRORE