Digital Personal Data Protection Bill 2023 approved
According to a recent report, the Central Government has approved the “Digital Personal Data Protection (DPDP) Bill”.
The Digital Personal Data Protection (DPDP) Bill is a proposed legislation. It sets out the rights and duties of citizens with respect to personal data.
It also sets out the obligations of the data fiduciary to legally use the stored data.
The process of drafting such a bill began in 2017 with the decision in the KS Puttaswamy vs Union of India case.
In this decision, the Supreme Court had said that ‘right to privacy’ is a fundamental right under life and personal liberty.
Data Fiduciary: The organization (individual, company, firm, state etc.) that determines the purpose and manner of processing personal data of the individual is called data fiduciary.
The latest draft of DPDP was released in November 2022. The draft focuses on the following seven principles of the data economy-
- lawful and fair collection and use of personal data;
- the personal data is used for the purpose for which it was collected;
- Data minimization – the collection of only as much data as is necessary to fulfill a particular purpose;
- accuracy of personal data;
- Permission to store data only for the mandatory period
- Appropriate security measures must be taken to ensure that unauthorized collection or processing of data does not take place; And
- Accountability of the person deciding the purpose and means of data processing must be ensured.
Need for a law on data protection:
- The incidents of cyber attacks and leakage of sensitive data are on the rise.
- Publicly available personal data needs to be regulated.
- Information is moving across national boundaries in a big way.
Source – The Hindu
