Data bill eases transfer rules, raises penalties

Deeksha Bhardwaj and Binayak Dasgupta

NEW DELHI: The central government on Friday unveiled the Digital Data Protection Bill for public consultation, having redrawn a long-delayed law that will provide the legal framework for the fundamental right to privacy of Indian citizens with major implications for tech companies and digital businesses.

Now in its fourth iteration, the bill was shared by the Union ministry of electronics and technology and will likely be introduced in the upcoming winter session of parliament.

The key aspects of the bill include laying down certain conditions for how personal data — defined as “any data about an individual who is identifiable by or in relation to such data” — of Indian citizens will be handled, the obligations of those that collect it, and the powers of the

Personal data can only be processed after specific, informed and unambiguous consent. Individuals whose data is stored will also have right to withdraw consent, be forgotten. Significant data fiduciaries will have to carry out audits, give a summary of what data is in use. Personal information of children can only be accessed after parents’ approval. government in accessing such information.

“The focus is on protecting internet users from all kinds of online harm, and create a safe and trusted digital ecosystem keeping in mind that India is a digital economy powerhouse today,” said the Union minister

The fine companies can attract for lack of breach

safeguards for technology, Ashwini Vaishnaw, while speaking to reporters in Delhi.

The minister added that the government has “made sure that all principles of privacy” laid down by the Supreme Court and in other countries have been