Government Likely To Give Companies Up To 2 Years To Be Fully Compliant With Data Law, Adjust Business Practices
[ By Bobby Anthony ]The government is likely to give companies up to two years to be fully compliant with the proposals in the Data Protection Bill after it passes Parliament and becomes law, it has been indicated.A member of the Bill’s drafting panel who is also a former telecom and IT secretary has stated that companies would be given lead time to implement the law but they needed to...
The government is likely to give companies up to two years to be fully compliant with the proposals in the Data Protection Bill after it passes Parliament and becomes law, it has been indicated.
A member of the Bill’s drafting panel who is also a former telecom and IT secretary has stated that companies would be given lead time to implement the law but they needed to get their act together quickly.
The companies will get a lead time, but they will have to get their act together quickly as there is enough precedent set with the European Union’s General Data Protection Regulation (GDPR) on which the Indian law is based.
The Bill seeks to give the ownership of the data in the hands of the people and is based on the consent architecture. It means that organizations, big and small, would have to seek the individual’s consent before collecting any personal data and would have to clearly notify them of the purpose of its use.
Data fiduciaries will have to delete the data in a stipulated time and users will have the option to revoke their consent at any time. Data localization provisions on sensitive and critical personal data mean all the data of Indian users stored around the world will have to bring back to India, adding significant costs to businesses.