Data localisation only for specific purposes: IT secretary
2 months, 3 weeks ago

Data localisation only for specific purposes: IT secretary

Hindustan Times  

The draft Digital Personal Data Protection Rules will take a targeted approach to data localisation, affecting only specific categories of personal data and for specific purposes, information technology secretary S Krishnan said, adding that there are no easy solutions to verifying children’s age online. The current approach, however, empowers the government to specify countries where data cannot be transferred under the act and through the rules allows a committee to recommend what personal data and “traffic data” significant data fiduciaries must keep within India. For children’s age verification, Krishnan suggested virtual tokens could potentially query authenticated parentage records, possibly using digitised school enrollment data, but only if compatible with schools’ purpose limitation mandates. On data breaches, he clarified that while they have tried to harmonise reporting requirements with other regulations like Cert-In directions and Telecom Cyber Security Rules, “the purpose of and intent behind reporting could be a little different.” For instance, cyber attacks might affect infrastructure without compromising personal data, thus not triggering DPDP Act provisions.

India Personal Data Act Different Personal Data Krishnan Data Localisation Protection Rules  protection  rules  information  different  technology  specific  secretary  localisation  krishnan  purposes  act  data  personal

History of this topic

Nasscom flags concerns over data localisation
3 weeks, 4 days ago

Nasscom flags concerns over data localisation

New Indian Express  

Tech industry apex body Nasscom on Thursday said the new proposal in the draft Rules under the Digital Personal Data Protection Act to restrict transfer of personal data outside India "appears to be inconsistent with the spirit and the objectives of the Act and should be reconsidered." In its feedback on the draft Rules under the DPDP Act, which was …

Draft data protection rules: What are the concerns related to localisation norms and government exemptions?
2 months, 2 weeks ago

Draft data protection rules: What are the concerns related to localisation norms and government exemptions?

The Hindu  

The Ministry of Electronics and Information Technology on January 3, 2025, released the the draft rules for implementing the Digital Personal Data Protection Act, 2023 — sixteen months after the law was notified in August 2023. This approach could also help prevent ad hoc data localisation mandates from government departments working in silos. According to Aparajita Bharti, a founding partner …

Bill to take charge of India’s digital destiny
2 months, 2 weeks ago

Bill to take charge of India’s digital destiny

Hindustan Times  

You wake up, pour yourself a coffee, and scroll through your phone. But what if every app and website you’ve ever used — Instagram, Amazon, or even that odd e-store — was quietly rifling through your personal data without asking you? India’s proposed Digital Personal Data Protection Rules, 2025 aim to ensure this nightmare doesn’t become your daily reality. Localisation …

India’s data protection rules need some fine-tuning
2 months, 2 weeks ago

India’s data protection rules need some fine-tuning

The Hindu  

On January 3, 2025, the Ministry of Electronics and Information Technology released the much-anticipated Draft Digital Personal Data Protection Rules — a key moment in India’s journey to regulate digital personal data. The draft rules represent a departure from the earlier and controversial Personal Data Protection Bill, which many deemed was overly restrictive and even hostile to industry interests. While …

Rollout of Data Rules set for mid-2025: IT Minister
Trending News
2 months, 3 weeks ago

Rollout of Data Rules set for mid-2025: IT Minister

The Hindu  

The government is aiming to notify and begin implementing the Digital Personal Data Protection Rules, 2025 — currently in a draft state — by the middle of this year, Union Minister of Electronics and Information Technology Ashwini Vaishnaw said. “I don’t see too many amendments coming in the final notification beyond some tweaks.” While large firms are prepared to comply …

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks
Trending News
2 months, 3 weeks ago

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks

Live Mint  

Companies waited nearly two years for the Indian government to frame rules for implementing the Digital Personal Data Protection Act—a threadbare legislation with a lot of queries on compliance mechanisms left unanswered. Concern: In emphasizing the “specified" purpose of the data, the legislators have created an overlap with the provisions of “Legitimate Use" under the DPDP Act, which allows data …

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks
2 months, 3 weeks ago

Mint Explainer: The digital personal data protection Act, its rules, and roadblocks

Live Mint  

Companies waited nearly two years for the Indian government to frame rules for implementing the Digital Personal Data Protection Act—a threadbare legislation with a lot of queries on compliance mechanisms left unanswered. Concern: In emphasizing the “specified" purpose of the data, the legislators have created an overlap with the provisions of “Legitimate Use" under the DPDP Act, which allows data …

Mint Quick Edit | India’s new privacy rules: A mixed bag
2 months, 3 weeks ago

Mint Quick Edit | India’s new privacy rules: A mixed bag

Live Mint  

More than a year after the Digital Personal Data Protection Act was passed, the government has released the draft rules that will enable this law’s implementation. While the rules are expansive, their requirement of parental consent for under-18-year-olds to join social media and gaming platforms could deliver a pragmatic age-gating regime. That said, the return of data localization requirements will …

Parental nod, ID proof: How Modi govt plans to regulate digital access for minors
Top News
2 months, 3 weeks ago

Parental nod, ID proof: How Modi govt plans to regulate digital access for minors

India Today  

The Union government, at the beginning of the new year, unveiled a long-anticipated blueprint for India’s digital future: the draft Digital Personal Data Protection Rules, 2025. Social media platforms, gaming apps and e-commerce websites—all categorised as “data fiduciaries”—are now tasked with obtaining explicit, verifiable consent from users before collecting, processing or storing personal data. When the users in question are …

Data protection rules: India Inc says challenges remain
2 months, 3 weeks ago

Data protection rules: India Inc says challenges remain

New Indian Express  

NEW DELHI: The Ministry of Electronics and Information Technology has released the much-awaited draft rules for the Digital Personal Data Protection Act, 2025. Continued engagement from the government will be key to ensuring effective implementation.” Goldie Dhama, Partner at Deloitte India, said the draft offers important clarifications, mainly regarding verifiable consent for children’s data. After a gap of over 16 …

Digital Personal Data Protection Rules: Govt drafts stringent parental consent rules for social media users under 18
2 months, 4 weeks ago

Digital Personal Data Protection Rules: Govt drafts stringent parental consent rules for social media users under 18

Op India  

On 3rd December, the Government of India proposed detailed rules under the Digital Personal Data Protection Rules, 2025. One of the most talked-about aspects of the draft is the rule that makes verifiable parental consent mandatory for creating social media accounts and processing the personal data of children. As per the draft rules, every organisation that collects personal data must …

EU's data privacy laws stymie India's investigation into airline bomb hoax calls
4 months, 2 weeks ago

EU's data privacy laws stymie India's investigation into airline bomb hoax calls

Live Mint  

New Delhi: India’s hunt for the perpetrators of multiple bombing threats that significantly disrupted the domestic aviation and hospitality sectors has hit a roadblock in Europe, where most of the hoax calls are said to have been made through virtual private networks. “India has currently hit a roadblock in the European Union, with France and Germany being among the nations …

Word choice in India’s data protection law and a dilution of rights
1 year, 7 months ago

Word choice in India’s data protection law and a dilution of rights

The Hindu  

After years of going back and forth on its contents, India finally has a data protection law, i.e., the Digital Personal Data Protection Act, 2023. In the search for an answer to this question, we need to look at two basic features of any data protection law: the use of personal data with consent and without it. As decades of …

India's DPDP Bill: Pioneering data privacy safeguarding with empowered individuals and responsible fiduciaries
1 year, 7 months ago

India's DPDP Bill: Pioneering data privacy safeguarding with empowered individuals and responsible fiduciaries

Firstpost  

The DPDP Bill signifies a pivotal shift in data processing practices, making it crucial for organisations to comprehend its provisions and ensure compliance The Digital Personal Data Protection Bill represents a significant step towards safeguarding data privacy in India. The DPDP Bill requires data fiduciaries to obtain consent from individuals before processing their personal data. The DPDP Bill also sets …

Explained: India's new Digital Personal Data Protection framework
1 year, 7 months ago

Explained: India's new Digital Personal Data Protection framework

Hindustan Times  

A new law that defines how companies should process users' data came into force with the President giving assent to the Digital Personal Data Protection Act passed by Parliament in the just-concluded monsoon session. Digital Personal Data Protection law has been notified by government. Entities must protect personal data in their possession by taking reasonable security safeguards to prevent a …

Paytm CEO says data protection bill ‘well articulated’, calls it ‘progress of our digital economy’
1 year, 7 months ago

Paytm CEO says data protection bill ‘well articulated’, calls it ‘progress of our digital economy’

Hindustan Times  

Paytm founder and CEO Vijay Shekhar Sharma on Friday took to X to praise the Digital Personal Data Protection Act, stating that it has been “well articulated” and that “it is progress for India's digital economy,” tagging Union minister Rajeev Chandrasekhar and the IT ministry. The Digital Personal Data Protection Bill, 2023, which curbs the misuse of personal information by …

President Gives Assent To Digital Personal Data Protection Act 2023
1 year, 7 months ago

President Gives Assent To Digital Personal Data Protection Act 2023

Live Law  

The President has given assent to the new the Digital Personal Data Protect, Act 2023 on Friday. The Bill seeks “to provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such personal data for lawful purposes.” It applies to the processing …

Satire India new Digital Personal Data Protection Bill, 2023 policy highlights
1 year, 7 months ago

Satire India new Digital Personal Data Protection Bill, 2023 policy highlights

The Hindu  

First of all, kudos to the Mother of Democracy for setting new world records every day for fastest-ever law-making. Did you know the Digital Personal Data Protection Bill, 2023 zipped through Parliament faster than a bullet train? There was no nonsense like ‘informed consent’ because they knew that all individual streams of data merge eventually with the Annadata — ‘the …

India passes data protection legislation in Parliament. Critics fear privacy violation
1 year, 7 months ago

India passes data protection legislation in Parliament. Critics fear privacy violation

Associated Press  

NEW DELHI — Indian lawmakers Wednesday approved a data protection legislation that “seeks to better regulate big tech firms and penalize companies for data breaches” as several groups expressed concern over citizens’ privacy rights. The legislation will limit cross-border transfer of data and provide a framework for setting up a data protection authority to ensure compliance from tech companies, Information …

Falling short: The Hindu Editorial on the Digital Data Protection Bill, 2023
1 year, 7 months ago

Falling short: The Hindu Editorial on the Digital Data Protection Bill, 2023

The Hindu  

The Digital Data Protection Bill, 2023, was passed in the Lok Sabha on Monday and will now have to be cleared by the Rajya Sabha. These “uses” are situations where such data may be processed without obtaining the data principal’s consent, such as by government agencies for providing licences, welfare benefits, permits and services. The Srikrishna Committee’s Draft Bill in …

Indranil Banerjie | A Law to Protect Citizens, Or To Help in State Snooping?
1 year, 7 months ago

Indranil Banerjie | A Law to Protect Citizens, Or To Help in State Snooping?

Deccan Chronicle  

In today’s digital age, privacy is a chimera -- the reality is that every intimate detail of our lives, from our eating and spending patterns to medical and financial details, are digitally recorded in some computer somewhere in the vast cloud and can therefore be potentially exposed. The idea of a digital data protection law had become imperative given the …

DPDP gives people command over their personal data: EY
1 year, 7 months ago

DPDP gives people command over their personal data: EY

The Hindu  

The Digital Personal Data Protection Bill will empower data principals to have command over their data, said Lalit Kalra, Technology Partner, EY India. “The Bill gives more power to individuals especially in the context that for many years, organisations and various platforms have been collecting personal data of individual citizens,” he told The Hindu. Further explaining the additional rights the …

Explained: What is the Digital Personal Data Protection Bill 2023?
1 year, 7 months ago

Explained: What is the Digital Personal Data Protection Bill 2023?

Live Mint  

On 3 August, the long-awaited and much-debated Digital Personal Data Protection Bill, 2023 was introduced in the Lok Sabha. On 7 August, the Lok Sabha passed the bill, which aims to “provide for the processing of digital personal data in a manner that recognises both the right of individuals to protect their personal data and the need to process such …

The new data bill will mark a paradigm shift
1 year, 7 months ago

The new data bill will mark a paradigm shift

Hindustan Times  

The Digital Personal Data Protection Bill was passed by the Lok Sabha yesterday. This is why I have been opposed to the enactment of a compliance-heavy, General Data Protection Regulation style regulation in India, even though this is widely believed to be the gold standard for data protection. Most of the other data protection principles — retention restrictions, purpose specifications, …

Digital Personal Data Protection Bill Introduced in Lok Sabha After Long Wait
1 year, 7 months ago

Digital Personal Data Protection Bill Introduced in Lok Sabha After Long Wait

The Quint  

Here are the highlights from the DPDP Bill, 2023, that was tabled in the Lok Sabha on Thursday: What type of data does the Bill regulate? The latest version of the DPDP Bill, 2023, proposes to regulate the processing of only digital personal data belonging to the Data Principal. A Data Principal's personal data can be processed as long as …

India’s data protection law needs refinement
1 year, 8 months ago

India’s data protection law needs refinement

The Hindu  

India is no Europe, and this seems especially true in the face of a task such as drafting and conceptualising a data protection law for over 1.4 billion Indians. The European Union’s data protection law, i.e., the General Data Protection Regulation, came into force in the middle of 2018 and achieved widespread popularity as arguably the most comprehensive data privacy …

Data Protection Bill to be tabled this monsoon session: Here’s everything you need to know
1 year, 8 months ago

Data Protection Bill to be tabled this monsoon session: Here’s everything you need to know

Firstpost  

The Indian Parliament will table the Digital Personal Data Protection Bill during the ongoing monsoon session. The Digital Personal Data Protection Bill, 2022, which was initially proposed in November, is set to be presented during the Monsoon Session of Parliament starting on July 20. In November 2022, the draft Digital Personal Data Protection Bill, 2022, was made publicly available by …

New Data Protection Bill receives Cabinet's green light: Here's all you need to know
1 year, 8 months ago

New Data Protection Bill receives Cabinet's green light: Here's all you need to know

India TV News  

India's ongoing efforts to protect privacy and personal data have gained significance in light of the Supreme Court's recognition of privacy as a fundamental right under Article 21 of the Constitution. The need for a robust data protection law became apparent following incidents of data breaches and unauthorized use of personal information by entities before stricter regulations were imposed globally. …

Cabinet clears Data Protection Bill
1 year, 8 months ago

Cabinet clears Data Protection Bill

The Hindu  

The Union Cabinet on Wednesday cleared the Digital Personal Data Protection Bill, a senior government official said. Along with the data protection law, the Union government may also table the Indian Telecommunications Bill, a draft of which was circulated in a public consultation last year. As per the latest draft, courts and law enforcement agencies enjoy wide exemptions from key …

Fix govt accountability for personal data leaks
1 year, 9 months ago

Fix govt accountability for personal data leaks

Hindustan Times  

Privacy – that elusive fundamental right – is again under the spotlight with reports of a possible breach of CoWIN data of individuals. Two provisions under the Information Technology Act, 2000 – Section 43A and Section 72A – encompass personal data protection in India. Pursuant to the Puttaswamy judgment of 2017, the central government released multiple drafts of the proposed …

Looking at the cross-border data flow regime in the DPDP Bill 2022
2 years ago

Looking at the cross-border data flow regime in the DPDP Bill 2022

Hindustan Times  

According to a 2019 report of India's ministry of electronics and information technology, India's digital economy could reach $1 trillion by 2025. Section 17 of the new draft Digital Personal Data Protection Bill 2022 will allow businesses to store data in "trusted jurisdictions," which the central government will later specify on a "whitelist" based on their evaluation. This may make …

10 Important Data Protection Practices To Keep In Mind For A Startup In India
2 years, 1 month ago

10 Important Data Protection Practices To Keep In Mind For A Startup In India

Live Law  

Recent years have seen a digital boom worldwide resulting in the explosion of digital data collection and distribution. In this regard, the Digital Personal Data Protection Bill 2022 has been proposed which will ensure fair use and disposal of digital personal data collected online and offline in India and also outside India by companies offering goods and services to individuals …

Towards a thoughtful data protection law
2 years, 1 month ago

Towards a thoughtful data protection law

Hindustan Times  

Digital technology is transformative, and India has been particularly influenced by it. As with much else, the data protection law will have to create a balance between the conflicting interests of several groups, including government, big tech, startups, individuals and civil society. Fortunately, the new Personal Data Protection Bill decouples nationalism and data localisation. Significantly, India has now assumed the …

Needed, a new approach to data protection for minors
2 years, 2 months ago

Needed, a new approach to data protection for minors

The Hindu  

How freely should Indian teenagers access the Internet? The draft Digital Personal Data Protection Bill, 2022 currently provides for mandatory parental consent for all data processing activities by children, defined as any person aged under 18 years. In a country with low digital literacy, where parents in fact often rely on their children to help them navigate the Internet, this …

Significant controls to govt. under data protection bill to hit investments in data centres: ITI
2 years, 3 months ago

Significant controls to govt. under data protection bill to hit investments in data centres: ITI

The Hindu  

Significant controls and exemptions to the government under the proposed Digital Personal Data Protection bill 2022 are likely to make it harder for companies to invest in data centres and data processing activities in India, according to global technology industry body ITI. The Ministry of Electronics and IT has floated draft Digital Personal Data Protection Bill 2022 and has invited …

Political Line | Public Debate on Privacy
2 years, 3 months ago

Political Line | Public Debate on Privacy

The Hindu  

India’s new draft Digital Personal Data Protection Bill, 2022 is being debated intensely. Privacy activists and legal scholars are concerned that the draft is going in the wrong direction, with the government giving itself too much power to collect data, and snoop on people. The draft DPDP bill reiterates state authority and sovereignty over all questions related to data, including …

HT interview: Data bill in line with global practices, says Vaishnaw
2 years, 3 months ago

HT interview: Data bill in line with global practices, says Vaishnaw

Hindustan Times  

The new draft of the data protection bill was released on November 18, and has attracted both praise and criticism, the first for its light-touch and technology agnostic approach to regulating a dynamic space, and the second for the significant exemptions it grants to governments and government agencies when it comes to using the data of individuals. First, the structure, …

Why the new draft data bill must be reconsidered
2 years, 4 months ago

Why the new draft data bill must be reconsidered

Hindustan Times  

Earlier this month, the government released the Digital Data Protection Bill of 2022, and asked for public comments. The government said this iteration provides a progressive and adequate legal framework for data protection in India; and, in particular, having listened to industry critiques of the draft Personal Data Protection Bill of 2018, it has removed onerous provisions regarding the storage …

Digital Personal Data Protection Bill DPDP Draft revise changes tech firm state instrumentation input comment last date
2 years, 4 months ago

Digital Personal Data Protection Bill DPDP Draft revise changes tech firm state instrumentation input comment last date

ABP News  

The Centre on November 18 released a revised draft of the Digital Personal Data Protection Bill, 20022, with an increased focus on personal data as a fundamental right, as ruled by the Supreme Court. The Personal Data Protection Bill was introduced in the Lok Sabha in December 2019. What the revised Digital Personal Data Protection Bill, 2022, brings to the …

Persisting issues: The Hindu Editorial on the new data protection bill
2 years, 4 months ago

Persisting issues: The Hindu Editorial on the new data protection bill

The Hindu  

A new draft of the much-awaited data protection Bill, the Digital Personal Data Protection Bill 2022, is now open for public comments. The new draft, unlike the 2018 version, does not refer to key data protection principles such as collection limitation — obligations on the data fiduciaries to collect only such personal data that is required for the purpose of …

Data protection bill may need multiple iterations before becoming practical: experts
2 years, 4 months ago

Data protection bill may need multiple iterations before becoming practical: experts

The Hindu  

The draft Digital Personal Data Protection Bill, 2022, released on Friday, is a mix of hits and misses, with more misses than hits, and would need multiple iterations before becoming practical, according to experts. They have no right to data portability.” “The Data Protection Board is toothless as most power is given to the Executive to prescribe through Rules,” she …

Revised personal data protection bill proposes hefty fines, eases cross-border data flow
2 years, 4 months ago

Revised personal data protection bill proposes hefty fines, eases cross-border data flow

The Hindu  

The Centre’s significantly shortened and revised draft Bill on personal data protection proposes a hefty increase in penalty amounts up to ₹500 crore, while also easing rules on cross-border data flows, in a big relief for large tech firms. The revised draft — now called The Digital Personal Data Protection Bill, 2022 — comes just over three months after its …

Are data localisation requirements necessary and proportionate?
2 years, 4 months ago

Are data localisation requirements necessary and proportionate?

The Hindu  

The importance and use of data in today’s technology-driven world is immense. While governments try to reap the most by exploiting data to drive their economy, there are various other challenges that can shoot up due to non-uniform data localisation laws around the globe. In this age of rapid technological growth, governments should shift to alternate standards rather than enforcing …

First Principles | What the new Data Protection Bill might look like
2 years, 5 months ago

First Principles | What the new Data Protection Bill might look like

Hindustan Times  

Ever wondered why do you get spammed with phone calls, emails and text messages from service providers of all kinds? In any case, this was the stated intent of the Personal Data Protection Bill which was withdrawn after much work had gone into it earlier in August this year. While the browser is free, the data that Chrome collects about …

Govt to bring in data protection law soon: Rajeev Chandrasekhar
2 years, 6 months ago

Govt to bring in data protection law soon: Rajeev Chandrasekhar

Live Mint  

India will replace the IT Act with a Digital India Act, comprising a modern framework of laws and rules that will act as catalysts for innovation and protecting citizen's rights, said Rajeev Chandrashekhar, minister of state for electronics and information technology. Speaking at the USIBC India Ideas summit, he said that the government will bring a fresh comprehensive legislative framework …

As IRCTC Mulls Data Monetisation, There Is an Urgent Need for Data Privacy Rules
2 years, 7 months ago

As IRCTC Mulls Data Monetisation, There Is an Urgent Need for Data Privacy Rules

The Quint  

Both these moves have sparked a new line of debate about the data privacy issues. The recent withdrawal of the Personal Data Protection Bill by the government, citing more comprehensive legislation, has also triggered concerns as data privacy remains guided by the provisions of the Information Technology Amendment Act 2008 and the related rules of 2011, and are found to …

India needs a data regulator
2 years, 7 months ago

India needs a data regulator

Hindustan Times  

The government is considering doing away with the need for a data protection authority in the new draft of the data protection law, this newspaper reported on Friday. But they cited the ease of doing business, especially for small- and medium-sized enterprises for whom a regulator such as DPA, especially in how its role was envisioned in the last personal …

Data opportunity at the G20
2 years, 7 months ago

Data opportunity at the G20

The Hindu  

The global politics of data is rapidly evolving as leading and emerging digital economies like the European Union, the U.S., India, Indonesia, and South Africa strive to protect, monetise, and leverage data collected within their territories for domestic purposes. Since 2017, India has attempted to incubate governance of non-personal data, personal data, e-commerce regulation and artificial intelligence with a preference …

Handle personal data with care
2 years, 7 months ago

Handle personal data with care

Hindustan Times  

The government on Monday notified the Passenger Name Record Information Regulations, 2022, making it mandatory for any operating flight to share details of international travellers with a customs agency. As safeguards, the notification says such data will be subject to privacy laws in force, avoid certain types of information and be processed only within a secure system. While little is …

Discover Related