Personal Data Protection Bill 2019
Personal Data Protection Bill 2019 | |
---|---|
Parliament of India | |
Long title
| |
Territorial extent | India |
Enacted by | Parliament of India |
Legislative history | |
Bill published on | 11 December 2019 |
Introduced by | Ravi Shankar Prasad |
Status: Pending |
The Personal Data Protection Bill 2019 (PDP Bill 2019) was tabled in the Indian Parliament by the Minister of Electronics and Information Technology on 11 December 2019.[1] As of March, 2020 the Bill is being analyzed by a Joint Parliamentary Committee (JPC) in consultation with experts and stakeholders. The JPC, which was let up in December, 2019, is headed by BJP Member of Parliament (MP) Meenakshi Lekhi. While the JPC was tasked with a short deadline to finalize the draft law before the Budget Session of 2020, it has sought more time to study the Bill and consult stakeholders. The JPC report is expected to be submitted by the second week of the upcoming Monsoon Session of the Indian Parliament.[2] [3][4]
The Bill covers mechanisms for protection of personal data and proposes the setting up of a Data Protection Authority of India for the same.[1] Some key provisions the 2019 Bill provides for which the 2018 draft Bill did not, such as that the central government can exempt any government agency from the Bill and the Right to Be Forgotten, have been included.[5][6]
Forbes India reports that "there are concerns that the Bill [...] gives the government blanket powers to access citizens' data."[7]
Background
In July 2017, the Ministry of Electronics and Information Technology set up a committee to study issues related to data protection. The committee was chaired by retired Supreme Court judge Justice B. N. Srikrishna.[8] The committee submitted the draft Personal Data Protection Bill, 2018[9] in July 2018.[10][11][12] After further deliberations the Bill was approved by the cabinet ministry of India on 4 December 2019[13][14] as the Personal Data Protection Bill 2019 and tabled in the Lok Sabha on 11 December 2019.[1]
Provisions
The Bill aims to:[15]
to provide for protection of the privacy of individuals relating to their personal data, specify the flow and usage of personal data, create a relationship of trust between persons and entities processing the personal data, protect the fundamental rights of individuals whose personal data are processed, to create a framework for organisational and technical measures in processing of data, laying down norms for social media intermediary, cross-border transfer, accountability of entities processing personal data, remedies for unauthorised and harmful processing, and to establish a Data Protection Authority of India for the said purposes and for matters connected there with or incidental thereto.
Criticism
The revised 2019 Bill was criticized by Justice B. N. Srikrishna, the drafter of the original Bill, as having the ability to turn India into an “Orwellian State".[lower-alpha 1][16] In an interview with Economic Times, Srikrishna said that, "The government can at any time access private data or government agency data on grounds of sovereignty or public order. This has dangerous implications.”[16] This view is shared by a think tank in their comment number 3.[17]
Apar Gupta of Internet Freedom Foundation notes that "Privacy is mentioned just once in this voluminous document[lower-alpha 2] — 49 mentions of ‘security’ and 56 mentions of 'technology'" implying that the Bill doesn't do enough to protect an individual's privacy.[18]
Fresh criticism on the international level comes from an advisor to a group proposing an alternative text.[19] A moderately critical summary is available from an India scholar working with an American co-author.[20]
The role of social media intermediaries is being regulated more tightly on several fronts. The Wikimedia Foundation is hoping that the PDP bill will prove the lesser evil compared with the Draft Information Technology [Intermediary Guidelines (Amendment) Rules] 2018.[21][22]
See also
- Draft Information Technology (Intermediary Guidelines (Amendment) Rules) 2018
- UK Data Protection Act 2018
- EU General Data Protection Regulation
- UK Data Protection Act 1998
- Data security
Notes
References
- ↑ 1.0 1.1 1.2 "The Personal Data Protection Bill, 2019" (in en). 2019-12-11. http://prsindia.org/billtrack/personal-data-protection-bill-2019.
- ↑ https://economictimes.indiatimes.com/tech/internet/jpc-wants-more-time-to-submit-data-bill-note/articleshow/74800912.cms?from=mdr
- ↑ https://pib.gov.in/PressReleasePage.aspx?PRID=1601695
- ↑ Das, Goutam (17 December 2019). "Personal Data Protection Bill: More drama ahead". https://www.businesstoday.in/current/economy-politics/personal-data-protection-bill-expect-more-tweaks-post-parliament-panel-consultations/story/392160.html.
- ↑ "Key Changes in the Personal Data Protection Bill, 2019 from the Srikrishna Committee Draft" (in en). https://sflc.in/key-changes-personal-data-protection-bill-2019-srikrishna-committee-draft.
- ↑ Mandavia, Megha (2019-12-10). "Data Protection Bill: Centre has the power to exempt any government agency from application of Act". The Economic Times. https://economictimes.indiatimes.com/tech/internet/data-protection-bill-centre-has-the-power-to-exempt-any-government-agency-from-application-of-act/articleshow/72454669.cms.
- ↑ "The Personal Data Protection Bill could be a serious threat to Indians' privacy" (in en). http://www.forbesindia.com/article/leaderboard/the-personal-data-protection-bill-could-be-a-serious-threat-to-indians-privacy/56623/1.
- ↑ "Personal Data Protection Bill 2018 draft submitted by Justice Srikrishna Committee: Here is what it says" (in en-IN). 2018-07-28. https://indianexpress.com/article/technology/tech-news-technology/personal-data-protection-bill-2018-justice-srikrishna-data-protection-report-submitted-to-meity-5279972/.
- ↑ "Personal Data Protection Bill 2018" (in en). https://meity.gov.in/writereaddata/files/Personal_Data_Protection_Bill,2018.pdf.
- ↑ PricewaterhouseCoopers. "Data Privacy Bill 2019: All you need to know" (in en-in). https://www.pwc.in/consulting/cyber-security/data-privacy/personal-data-protection-bill-2019-what-you-need-to-know.html.
- ↑ "Draft Personal Data Protection Bill, 2018" (in en). 2018-07-30. http://prsindia.org/billtrack/draft-personal-data-protection-bill-2018.
- ↑ PricewaterhouseCoopers. "Decoding the Personal Data Protection Bill, 2018, for individuals and businesses" (in en-in). https://www.pwc.in/consulting/cyber-security/blogs/decoding-the-personal-data-protection-bill-2018-for-individuals-and-businesses.html.
- ↑ "Union Cabinet clears Personal Data Protection Bill. Major takeaways from Cabinet meet". The Economic Times. 2019-12-04. https://economictimes.indiatimes.com/news/economy/policy/union-cabinet-clears-personal-data-protection-bill/articleshow/72363463.cms.
- ↑ "Cabinet approves Personal Data Protection Bill" (in en-IN). The Hindu. 2019-12-04. ISSN 0971-751X. https://www.thehindu.com/news/national/cabinet-approves-personal-data-protection-bill/article30160306.ece.
- ↑ The Personal Data Protection Bill, 2019
- ↑ 16.0 16.1 Mandavia, Megha (2019-12-12). "Personal Data Protection Bill can turn India into ‘Orwellian State’: Justice BN Srikrishna". The Economic Times. https://economictimes.indiatimes.com/news/economy/policy/personal-data-protection-bill-can-turn-india-into-orwellian-state-justice-bn-srikrishna/articleshow/72483355.cms.
- ↑ "Our initial comments on the Personal Data Protection Bill 2019" (in en). 17 January 2020. https://www.dvara.com/blog/2020/01/17/our-initial-comments-on-the-personal-data-protection-bill-2019/.
- ↑ Gupta, Apar (2019-12-27). "The Data Protection Bill only weakens user rights" (in en-IN). The Hindu. ISSN 0971-751X. https://www.thehindu.com/opinion/lead/the-data-protection-bill-only-weakens-user-rights/article30405339.ece.
- ↑ Bhatia, Gautam (February 19, 2020). "India’s Growing Surveillance State: New Technologies Threaten Freedoms in the World’s Largest Democracy" (in en). https://www.foreignaffairs.com/articles/india/2020-02-19/indias-growing-surveillance-state.
- ↑ Basu, Arindrajit; Sherman, Justin (January 23, 2020). "Key Global Takeaways From India's Revised Personal Data Protection Bill" (in en). https://www.lawfareblog.com/key-global-takeaways-indias-revised-personal-data-protection-bill.
- ↑ Agarwal, Surabhi (27 December 2019). "Wikimedia flags worries on data law". The Economic Times. https://economictimes.indiatimes.com/tech/internet/wikimedia-flags-worries-on-data-law/articleshow/72988168.cms.
- ↑ "Draft Information Technology [Intermediaries Guidelines (Amendment) Rules 2018"] (in en). 2019-01-30. http://prsindia.org/billtrack/draft-information-technology-intermediaries-guidelines-amendment-rules-2018.
External links