The Digital Personal Data Protection Bill, 2022 And The GDPR

1. The Digital Personal Data Protection Bill, 2022 And The GDPR INTRODUCTION India, being a developing country, is undergoing fast growth, notably in the field of technology. India’s evolution to a totally internet-driven economy is one such exceptional example. However, in a nation like India, a lack of data protection legislation has compromised the expectation of privacy stipulated in the Indian Constitution; the importance of such laws has been reaffirmed by the court’s decision in the case of K.S. Puttaswamy, J. v. Union of India, and others. A tremendous quantity of confidential data has been created as a consequence of the increasing number of individuals utilising the worldwide web and the widespread usage of technology. This information has been collected without the consent or responsibility of individuals, raising questions regarding privacy issues. BACKGROUND The need for laws to protect confidential data in India has been brought about by the nation’s continually shifting legislative and governmental environment, in addition to the implementation of GDPR. This paved the way for the 2019 Personal Data Protection “Bill,” which highlighted the need for stiffer repercussions and enhanced information protection. Based on the Committee’s recommendations, the Personal Data Protection Bill, 2019, was put forward in Lok Sabha in December 2019. A Parliamentary Commission was tasked with assessing the bill, and its recommendations were due in December 2021.

2. SCOPE OF THE NEWLY PRESENTED BILL The previously announced Digital Personal Data Protection Bill 2022 has been the focus of a heated discussion. It is of the utmost importance to maintain the debate in order to ensure that a greater number of individuals become cognizant of the proposal’s flaws. The Solicitor General additionally indicated on the last day of January 2023, in a speech delivered shortly beforehand to the top court of India, that a data protection bill would be filed with the legislature in the second half of the budgetary session in 2023. As a consequence, this idea might become law in the next few months. The brief includes fresh information that was undertaken to ensure that everyone in the neighbourhood can have a substantive discussion about the strategy. The DPDPB, which merely attempts to regulate personal data, excludes non-personal data from its scope. For the first time in India, the pronouns “she” and “her” were used when describing persons of any gender in the Digital Privacy Bill 2022. Between the additional definitions, the DPDPB includes novel concepts such as “data principal” (the person to whom the personally identifiable information relates, which may include the individual’s parent’s or legal guardian if the individual in question is a child) and “data fiduciary relationships (the person who defines what it means and implies to collect and make use of personal data, either alone or jointly with others). The revised DPDPB only handles computerised or digital information; information that is manually entered is not addressed. In other areas, the draught bill provisions are deemed vague. For example, it is conceivable to misinterpret what “in the public interest” means and to what degree. The measure gives the centre additional authority.

3. The DPDPB proposes the formation of a “Data Protection Board,” which would serve as a regulatory body. According to the Information Protection Bill, the Board’s primary responsibility is to determine whether the provisions of this Act have been violated and to apply fines in line with their terms. The law further states that later rules will be issued establishing the chairman’s and other members’ composition, strength, supplementary qualifications, selection procedure, appointment terms, and removal. The Digital Security of Personal Data Bill 2022 further states that the federal government would choose the Chief Executive of the Board of Directors, and the Chief Executive’s qualifications and conditions for being employed will be determined by the government. CONCLUSION In a nutshell, the new Personal Information Protection Bill 2019 is an attempt by the government to develop a simplified yet intelligible data protection law, as opposed to the previous version of the bill, which was attacked by enterprises and start- ups for simply being compliance-intensive. Despite the fact that the current draught seems to have discussed issues such as localization, a consent-heavy organisation, and greater adherence to responsibilities, among others, specific provisions such as those that provide exemptions from the state’s processing of an individual’s data, insufficient justification in up-and-running details, and inadequate protections for data administrators are among the primary complaints raised by experts. Click Here : Digital Personal Data Protection Bill 2022