Digital Personal Data Protection Bill: 5 Key Points

Here are the five major key points of the Digital Personal Data Protection Bill in 2023

The Lok Sabha passed the Digital Personal Data Protection Bill by voice vote on Monday, with opposition members yelling slogans about the Manipur issue.

Some amendments proposed by opposition members to alter the measure were lost by voice vote. The law protects Indian residents' privacy while imposing a penalty of up to Rs. 250 crores on organizations that misuse or fail to secure people's digital data.

In an era where data has become the new currency, protecting personal information has become paramount. The Digital Personal Data Protection Bill, a significant legislative development, aims to safeguard the privacy and rights of individuals in the digital realm. As countries grapple with the challenges the digital age poses, the bill's key points offer valuable insights into protecting personal data.

1. Extraterritorial Applicability

One of the fundamental aspects of the bill is its extraterritorial applicability. This means that even foreign entities that process the personal data of Indian citizens are subject to the bill's provisions. This provision ensures that the rights and privacy of Indian citizens are upheld, regardless of where their data is being processed, reinforcing the global significance of data protection.

2. Informed Consent and Data Processing

The bill emphasizes the principle of informed consent, requiring entities to obtain explicit and clear consent from individuals before collecting, processing, or sharing their data. This provision empowers individuals to have greater control over how their data is used and enables them to make informed decisions about sharing their information.

3. Data Localization

A contentious issue in the digital era, data localization requires that a copy of personal data be stored within the country's borders. The bill outlines guidelines for sensitive personal data stored exclusively in India. This provision aims to bolster data security and mitigate risks associated with cross-border data transfers.

4. Data Protection Authority

Establishing a Data Protection Authority (DPA) is a crucial bill component. The DPA oversees and enforces data protection regulations, ensuring compliance by entities that handle personal data. This regulatory body acts as a watchdog to safeguard individuals' rights and promote accountability in data processing practices.

5. Rights of Individuals

The bill recognizes and enforces the rights of individuals over their data. This includes the right to access, correct, and erase their data and the right to restrict or object to its processing. These rights empower individuals to take control of their digital footprint and hold organizations accountable for handling personal data.