Analysis: The PDP Act is almost here. Do you have a data officer yet?
BY Ranajit Dam |
India’s new data protection law has been months in the making. The Personal Data Protection Bill 2019 was tabled in parliament by the Ministry of Electronics and Information Technology in December that year; since then it is being analysed by a Joint Parliamentary Committee in consultation with experts and stakeholders. Key aspects to the bill include sweeping mechanisms for protection of personal data, setting up a Data Protection Authority of India (DPA), a provision that the central government can exempt any government agency from the bill, and the “Right to Be Forgotten.” Since it was tabled, reaction has been mixed: There is the acknowledgement that India does need to fortify its data protection laws, coupled with the anxiety that the bill could be a serious threat to Indians' privacy. You can play a really cool card game to understand the bill better, and do also read this recent piece about the “arduous task” that lies ahead of the proposed DPA.