• Advertise
  • Membership
  • Sign inSUBSCRIBE
Legal Era
X
Sign in
  • Home
  • News
    +
    • From the Courts
    • Policy & Law
    • Supreme Court (India)
    • High Court (India)
    • TAX Updates
    • MARKET WATCH
    • Deal Street
    • Global Insights
    • IBC Cases
    • Hires & Moves
    • IP News
    • Competition Verdict
  • Articles
    +
    • ABOUT THE LAW
    • AWARDS & ACCOLADES
    • Aerospace
    • Agriculture
    • Alternate Dispute Resolution
    • Banking and Finance
    • Bankruptcy
    • Book Review
    • Bribery & Corruption
    • Commercial Litigation
    • Competition Law
    • Conference Reports
    • Consumer Products
    • Contract
    • Corporate Governance
    • Corporate Law
    • Covid-19
    • Cryptocurrency
    • Cybersecurity
    • Data Protection
    • Defence
    • Digital Economy
    • E-commerce
    • Employment Law
    • Energy and Natural Resources
    • Entertainment and Sports Law
    • Environmental Law
    • FDI
    • Food and Beverage
    • Health Care
    • IBC Diaries
    • Insurance Law
    • Intellectual Property
    • International Law
    • Labour Laws
    • Litigation
    • Litigation Funding
    • Manufacturing
    • Mergers & Acquisitions
    • NFTs
    • Privacy
    • Private Equity
    • Project Finance
    • Real Estate
    • Risk and Compliance
    • Technology Media and Telecom
    • Tributes
    • Zoom In
    • Take On Board
    • In Focus
    • Law & Policy and Regulation
    • IP & Tech Era
    • Viewpoint
    • Arbitration & Mediation
    • Tax
    • Student Corner
  • Law Firms
  • In-House
  • Rankings
  • E-Magazine
  • Legal Era TV
  • Events
  • News
    • From the Courts
    • Policy & Law
    • Supreme Court (India)
    • High Court (India)
    • TAX Updates
    • MARKET WATCH
    • Deal Street
    • Global Insights
    • IBC Cases
    • Hires & Moves
    • IP News
    • Competition Verdict
  • Articles
    • ABOUT THE LAW
    • AWARDS & ACCOLADES
    • Aerospace
    • Agriculture
    • Alternate Dispute Resolution
    • Banking and Finance
    • Bankruptcy
    • Book Review
    • Bribery & Corruption
    • Commercial Litigation
    • Competition Law
    • Conference Reports
    • Consumer Products
    • Contract
    • Corporate Governance
    • Corporate Law
    • Covid-19
    • Cryptocurrency
    • Cybersecurity
    • Data Protection
    • Defence
    • Digital Economy
    • E-commerce
    • Employment Law
    • Energy and Natural Resources
    • Entertainment and Sports Law
    • Environmental Law
    • FDI
    • Food and Beverage
    • Health Care
    • IBC Diaries
    • Insurance Law
    • Intellectual Property
    • International Law
    • Labour Laws
    • Litigation
    • Litigation Funding
    • Manufacturing
    • Mergers & Acquisitions
    • NFTs
    • Privacy
    • Private Equity
    • Project Finance
    • Real Estate
    • Risk and Compliance
    • Technology Media and Telecom
    • Tributes
    • Zoom In
    • Take On Board
    • In Focus
    • Law & Policy and Regulation
    • IP & Tech Era
    • Viewpoint
    • Arbitration & Mediation
    • Tax
    • Student Corner
  • Law Firms
  • In-House
  • Rankings
  • E-Magazine
  • Legal Era TV
  • Events

Top Stories

  • Cyril Amarchand Mangaldas advised Viacom 18 on the INR 13,500 crores investment by Bodhi Tree Systems
    Cyril Amarchand Mangaldas advised Viacom
  • Shardul-Amarchand-Mangaldas
    Shardul Amarchand Mangaldas, Veritas
  • Cyril Amarchand Mangaldas advised acquisition of Ambuja Cement and ACC Ltd by Adani Group for USD 10.5 billion
    Cyril Amarchand Mangaldas advised
  • Cyril-Amarchand-Mangaldas
    Cyril Amarchand Mangaldas advised Ayu
  • Supreme-Court
    Supreme Court rules on GST Council
  • Justice-NV-Ramana-&-Tushar-Mehta
    Supreme Court agrees to deliberate on
  • Google-Ads
    Google Ads trademark infringement
  • RazorPay
    Sachin S joins RazorPay as Legal
  • Veritas-AZB-IndusLaw
    Veritas, AZB, IndusLaw, Clifford, and GT
  • Nitin-Gera-&-Shruti-Barua
    L&L Partners advised Honasa Consumer on
The PDP Bill, 2019 – Upcoming expectations for Biz India
HomeArticlesData Protection
Data Protection

The PDP Bill, 2019 – Upcoming expectations for Biz India

By: Dhruv Matta & Prashant Phillips | Law Firm Lakshmikumaran & Sridharan (L&S)
23 Feb 2021 8:00 AM GMT

The PDP Bill, 2019 – Upcoming expectations for Biz India

The PDP Bill, 2019 – Upcoming expectations for Biz India

The PDP Bill, 2019 – Upcoming expectations for Biz India The PDP Bill prescribes a tiered obligation based framework for data protection where personal Information is categorized into three tiers i.e. normal, sensitive, and critical each carrying different obligations for a data fiduciary India is abuzz with discussions surrounding the issue of privacy. Every recent development in the...

ToRead the Full Story, Subscribe to Legal Era

Access the exclusive LEGAL ERAStories,Editorial and Expert Opinion

Subscribe Now
AlreadyaSubscriber?SigninNow
View Plans

The PDP Bill, 2019 – Upcoming expectations for Biz India

The PDP Bill prescribes a tiered obligation based framework for data protection where personal Information is categorized into three tiers i.e. normal, sensitive, and critical each carrying different obligations for a data fiduciary

India is abuzz with discussions surrounding the issue of privacy. Every recent development in the tech world is being scrutinized through the lens of privacy. This saga had started with the introduction of the Aadhaar card which was a government initiative and has now found its way to actions taken by large multinational companies like Facebook.


The requirement for a legislation which seeks to protect the informational privacy of an individual was also noted by the Hon'ble Supreme Court of India in the Puttaswamy decision which recognized an individual's right to privacy. As a consequence, the Srikrishna Committee proposed the draft Personal Data Protection Bill. The revised draft of the bill was tabled before the Parliament in December 2019 and has since been referred to a Joint Parliamentary Committee for deliberations. It is reported that the Joint Parliamentary Committee has completed its review of the draft Personal Data Protection Bill, 2019 Bill. Thus, this is an opportune time to recap the basic architecture of regulation proposed by the Bills and highlight the issues to check if the JPC has taken cognizance of the same.

The PDP Bill is the first cross-sectoral legal framework of India. Compliances prescribed under the Bill shall apply to all entities seeking to collect and process personal data. The PDP Bill prescribes a tiered obligation based framework for data protection. Personal Information is categorized into three tiers i.e. normal, sensitive, and critical each carrying different obligations for a data fiduciary. Further, anyone handling information could also be subject to a higher compliance threshold if categorized as a Significant Data Fiduciary. While the basic framework of the PDP Bill is borrowed from the GDPR, there are still many ingenious additions some of which may create challenges for the smooth implementation of prescribed measures.

The definition of personal data under the PDP Bill is wide. It extends itself to include any inferences drawn from personal information for the purposes of profiling. This over-extension of the definition of personal data creates multiple issues including management of privacy by design framework, notice conditions relating to purpose limitation, dilution of IPR, management of data principal rights like right to portability etc. The manner of making inferences is usually governed by proprietary methods devised by each data fiduciary and is derivative/worked upon data. Granting any data principal with control over such proprietary data could also slow investment and innovation.

Personal Data which is categorized as sensitive and critical data is also subject to restrictions on cross border movements. It has been highlighted vide various representations to the JPC that the categorizations for sensitive personal data are in itself broadly worded. This could lead to restrictions on cross border sharing and processing of data which could even remotely contain such elements. This shall restrict the free flow of data which is necessary for provision of services and continuation of various digital platforms. It has been suggested to the JPC that categories of sensitive data be made specific for coherence, and powers not be vested with the Data Protection Authority to notify newer categories. This shall ensure clarity to the Data Fiduciaries to design their data flows in compliance with the obligations under the PDP Bill. Any opportunity to frequently change the categorizations of sensitive personal data shall result in data fiduciaries to repeatedly re-examine their data flows for compliance. This is a cost intensive exercise for any data fiduciary. Further, critical personal data should be defined in the legislation itself. Powers of delegation without prescription of thresholds to a regulator could create unwarranted difficulties for any data fiduciary.

It is also pertinent to note at this junction that India is a favourable destination for various backend and business processing services. The PDP Bill currently seeks to bring data of persons collected and located outside India also under its purview till it is specifically exempted for each entity by the regulator. To cast such a wide net over all personal data which finds its way to India shall create red-tape issue for a flourishing services sector and could create an investment adverse environment.

Most importantly, certain provisions of the PDP Bill seek to regulate non-personal data held by a data fiduciary. The regulation of non-personal data cannot be the legitimate aim of a legislation designed for protection of personal data. This fact has also been noted by the Committee of Experts setup to look into the Regulation of Non-personal Data by MEITY.

Most importantly, the legislation should also look to provide time-lines for implementation and enforcement of the regulations to allow visibility to data fiduciaries and processors to re-work their data flows in accordance with law.

It is hoped that the draft to be released by the JPC in the budget session covers these preliminary issues to assuage the confusion that is likely to be faced in the implementation of the legislation.

Dhruv Matta

Dhruv Matta

Principal Associate, Lakshmikumaran & Sridharan

Dhruv Matta advises clients on IT laws with specific focus on issues relating to data privacy, technology transfer agreements, royalty agreements, and commodity classification & licensing requirements. He also has exhaustive litigation experience as a clerk to the Retd. Hon’ble Chief Justice of the Supreme Court of India (2013-2014); and as a practicing advocate before various judicial forums including the Hon’ble Supreme Court of India, different High Courts, and the Hon’ble CESTAT. His background enables him to advice on policy-related issues relating to data privacy and IT products.

Prashant Phillips

Prashant Phillips

Partner Lakshmikumaran & Sridharan

Prashant Phillips advises clients on cyber law with focus on data protection and data privacy. His experience also includes patent preparation, patent prosecution, patent litigation and industrial designs practice at L&S. He has written many articles on issues pertaining to cyber law in India and has advised clients on issues pertaining to data protection and data privacy, both under the Information Technology Act, 2000 and the Draft Personal Data Protection Bill, 2018, pending before the Indian parliament. His technical expertise enables him to fully understand the nuances of an IT systems and ascertain the key issues that may give rise to obligations under the various laws. His advisory has been focused on taking pre-emptive measures to mitigate any exposure from the existing laws.

Lakshmikumaran & Sridharan (L&S)

Lakshmikumaran & Sridharan (L&S)

TAGS:
  • Personal Data Protection 
  • PDP Bill 2019 
  • Dhruv Matta 
  • Significant data fiduciary 
  • personal data 
  • non-personal data 
  • data protection 
  • Lakshmikumaran & Sridharan 
Next Story
Similar Posts
See More
Trending Now
Tax on Alimony

Tax on Alimony

The Hierarchy of Indian Courts

The Hierarchy of Indian Courts

Insolvency Procedure For MSMEs?

Insolvency Procedure For MSMEs?

Cyril-Amarchand-Mangaldas

Cyril Amarchand Mangaldas advised Ayu Health and Vertex

Recommended Articles
Arbitration and Commercial Courts: A Jurisdictional Conflict

Arbitration and Commercial Courts: A Jurisdictional Conflict

Multiplicity of Arbitral Proceedings in India

Multiplicity of Arbitral Proceedings in India

Copyright and Non-Fungible Tokens (NFTs)

Copyright and Non-Fungible Tokens (NFTs)

Renewed Interest in Quincecare Duty of Care in Claims Against Banks

Renewed Interest in Quincecare Duty of Care in Claims

  • News
  • From the Courts
  • Supreme Court (India)
  • High Court (India)
  • Global Insights
  • Deal Street
  • Hires & Moves
  • Refund & Cancellation Policy
  • Articles
  • Zoom In
  • Take On Board
  • In Focus
  • Law & Policy
  • IP & Tech Era
  • Viewpoint
  • Arbitration & Mediation
  • Tax
  • Student Corner
  • Interviews
  • Law Firms
  • E-Magazine
  • Legal Era TV
  • Membership
  • Reader's Feedback
  • Cartoons
  • Subscribe
Follow Us
Subscribe Newsletter
  • 2022© All rights reserved Legal Era Media Group
  • Who We Are
  • Careers
  • Advertise with Us
  • Contact Us
  • Privacy Policy
  • Terms and Conditions
Powered by  Hocalwire
X
X