DIGITAL PERSONAL DATA PROTECTION BILL 2022

'
'

→
Centre introduced DPDP Bill 2022 Data is the new oil

DATA ( IT) DATA

It is the collection of information analytics

, → 7690 million internet users GAMAD
that is stored in a computer or network → Cyber crimes ( CERT -
IN)

↳ Big data - 4Vs

PRESENT LAWS

IT Act 2000
, 2018 21 22
IT Rules 2021

SC JUDGEMENT

K S
. .

Pultaswamy case - Sc held

that Right to
privacy is a FR

SIGNIFICANCE
Tech sector Govt

→
data analytics →
e-
governance digital
,
India

→
innovation →
policy making
→ national security
Economy Individual
4th IR
→ → informed choices
→ digitisation →
social media
e-commerce
→ →
ease of living

CONCERNS

Individual Govt
Individual
→ privacy 9 Safeguards → fake news -
mob lynching
no informed consent
→
→ cybersecurity
→ cyber crimes cyberbullying _

→ regulatory gap
→
interlinking of data
Tech Reason for withdrawing of the Bill
→
Data manipulation ↳ JPC recommendations
→
Data
sovereignty ↳ concerns by the tech industry
' ,

↳ objection by Privacy advocates

 DPDP BILL 2022

KEY PROVISIONS

1) Consent purpose limitation

into in multiple languages
deemed consent

parental consent

2) Data Principal right -

to correction G erase

right of grievance redressal

right to nominate
duties no
false info
_

3) Data Fiduciary transparency 9 accountability measures

notify data breach

data protection officer

significant data fiduciary

a) Exemption for legal G medical matters

state entities

5) Cross border data transfer

DP Board of India
6) Regulator →

CONCERNS

D Data
relaxation of data localisation
no data portability
2) Exclusion / exemption
non personal data

govt agencies
3) Regulator
non statutory body
limited role
D liability
→ financial liability
5) Views

→
bill is fundamentally flawed
Justice BN Sri Krishna
 WAY FORWARD

Individual Economy
→ more awareness →
Cross border data flows
→
cyber hygiene → encourage invest
→ digital economy
tech Govt
→ purpose limitation →
Stakeholder consultation

→ data minimisation →
Protect personal data
→ Reform surveillance laws

→
Coordination between regulators
SUGGESTIONS
→ Justice BN Sri Krishna committee

draft Data protection Bill 2018

→
JPC
Suggestions
EU DATA PROTECTION ACT (GDPR)

→ General Data Protection Regulation .

It aims to
give control to citizens and
residents over their personal data .

→
GDPR provides for Right to be forgotten
RIGHT TO BE FORGOTTEN
It
empowers individuals to ask
organs to
delete their personal data