The new data bill will mark a paradigm shift

The Digital Personal Data Protection Bill was passed by the Lok Sabha yesterday. This is why I have been opposed to the enactment of a compliance-heavy, General Data Protection Regulation style regulation in India, even though this is widely believed to be the gold standard for data protection. Most of the other data protection principles — retention restrictions, purpose specifications, data security, and the like — have been included, though with none of the detail that GDPR-style laws possess. By requiring all consent managers to be registered with the data protection board, it hints at the possibility that we might see cross-sectoral consented data-sharing arrangements in the near future. I have also grown increasingly concerned with the duties that have been imposed on data principals — a first, to the best of my knowledge, in any data protection law anywhere in the world.