3.5 C
New York
Wednesday 1 December 2021

Buy now

Ad

HomePoliticsIndiaData protection bill: How Modi govt will put private firms on leash

Data protection bill: How Modi govt will put private firms on leash

A Data Protection Authority to be set up under the law will regulate how personal and non-personal data will be managed in the country

|

The joint parliamentary committee (JPC) reviewing the proposed data protection law finalised its report on 22 November, suggesting stricter compliance requirements for companies while editing clauses that provide for lighter obligations on government agencies, and recommending that state have greater say in the legal mechanism that will be set up to safeguard personal and non-personal data, according to sources.

The JPC was set up in 2019 to take up the personal data protection bill after parliamentarians were divided over several provisions of the law meant to give a legal shape to the right to privacy after it was made a fundamental right by the Supreme Court in 2017.

Sources said that the panel had suggested new provisions that will build in additional compliances: companies would need to report a data breach within 72 hours, mandatorily disclose if information relating to a data principal (person or entity that owns the data) is passed on to someone else, and appoint senior management personnel as data protection who will ultimately be held responsible for lapses or violations.

Anyway, the rule about mandatory disclosure of third party sharing need to the data principal need not be made in case it is for state functions (such as for offering benefits, or maintaining law and order) or to comply with a court order. Government departments will be allowed to carry out an in-house inquiry to fix responsibility in the event of a leak, a person aware of the suggestions said.

The report will be tabled for discussion in the parliament session beginning 29 November, following which the government will reintroduce the bill. The recommendations are not binding.

There has been pushback from several opposition party members of the panel, who have argued that the new bill gives “unbridled power” to the government. At least five have already submitted their dissent notes and one more is expected by 24 November.

The report, the people quoted above said, makes suggestions as well as clause-by-clause tweaks.

In one of these suggestions, it has asked the government to ensure that copies of sensitive and critical personal data already in possession of foreign entities be brought back in a time bound manner a recommendation that could hold implications for financial systems services providers like Visa and MasterCard; and, in another recommendation, it has called for a mechanism in which social media companies can be treated as publishers in some circumstances.

A mechanism may be devised under which social media platforms will be held responsible for the content from unverified accounts, one of the people said, citing the report. Treating a social media company such as Facebook or Twitter as a publisher will make it liable under laws pertaining to illegal speech, such as those punishing hate and libel, thus, allowing them to prosecuted for third party content, which they are so far protected from under the IT Act.

The committee has, however, listened to the demands of stakeholders on some points, such as the removal of a blanket provision treating social media companies as publishers, and in implementing the legislation in a phased manner over a period of two years.

“The recommendations tighten regulatory framework for big tech companies and enhances compliance framework,” Supreme Court lawyer and founder of Cyber saathi NS Nappinai said. “That stakeholders have been heard is apparent 24 months is something big tech has been pushing for, in as much as they have argued that they cannot be treated as publishers.”

The people said that the panel has suggested a change in a particularly contentious portion of the law: Clause 35, which deals with conditions under which the government can access personal data without consent. It has recommended that the procedure by which this exemption is claimed be “just, fair, reasonable and proportionate”. This clause is contentious because it allows the government to claim the exemption if it is satisfied that it is “necessary or expedient” to do so in the interest of purposes such as national security. The tests for “just, fair and proportionate” have been explained further as part of procedure.

The committee was concerned about the possible misuse when a situation arises with privacy rights of the individual have to be subsumed for the protection of the larger interests of the state. The committee, therefore, felt that though the state has rightly been empowered, this power may be used only under exceptional circumstances and subject to conditions as laid out, one of the people cited above said, citing the report.

Some of the additional powers of the state are the ability to frame policies for non-personal data, including anonymised data; define significant social media platforms based on a threshold of users; and decide penalties for data fiduciaries for failing to comply with the law.

A Data Protection Authority (DPA), to be set up under the law, is meant to be the regulator that will decide how personal and non-personal data will be managed in the country. The authority will be chosen by a panel shortlisted by the union government a point that has already been a matter of contention since it raises questions about its autonomy. The panel’s report now suggests that DPA will need to follow the government’s lead on all matters and not just questions of policy.

“Such a clause will further dilute the power of the data protection authority,” Nappinai said.

Under clause 94, previously clause 93, which deals with granting powers to the government to make rules, the panel, the people said, recommends that the government decide the manner in which a data fiduciary can share, transfer or transmit the personal data to any person as part of any business transaction, and define the threshold of users of significant social media platforms and process of voluntary user verification.

The recommendations suggest the government will decide the penalty for those failing to comply with the provisions, which was earlier defined with respect to the global turnover of the company as part of the bill.

The panel says the government should take the final call on whether sensitive personal data can be shared with a foreign government or agency. The recommendations give the government the scope to set up a future statutory to look into the use of personal data by journalistic organisations, the people said.

Sirf News needs to recruit journalists in large numbers to increase the volume of its reports and articles to at least 100 a day, which will make us mainstream, which is necessary to challenge the anti-India discourse by established media houses. Besides there are monthly liabilities like the subscription fees of news agencies, the cost of a dedicated server, office maintenance, marketing expenses, etc. Donation is our only source of income. Please serve the cause of the nation by donating generously.

Support pro-India journalism by donating

via UPI to surajit.dasgupta@icici or

via PayTM to 9650444033

The next of kin of all those, who died of COVID-19 in Jammu & Kashmir, will get Rs 50,000 as an ex-gratia assistance from the administration, it announced on Tuesday

MPs' suspension: Piyush Goyal says Oppn should apologize for their behaviour

Read @ANI Story| https://aninews.in/news/national/general-news/mps-suspension-piyush-goyal-says-oppn-should-apologize-for-their-behaviour20211201015818/

#RajyaSabha

Σήμερα στην Επιτροπή Ελληνισμού της Διασποράς είχαμε συνεδρίαση αφιερωμένη στους Ρωμηούς της Συρίας και του Λιβάνου, με συμμετοχή φορέων εκπροσώπησής τους. #Ρωμέικο #Syria #Lebanon #Levant #Levante (1/6)

गत एक वर्ष में राष्ट्रीय नाट्य विद्यालय की प्रगति पर आयोजित पत्रकार वार्ता को सम्बोधित करते हुए अध्यक्ष, राष्ट्रीय नाट्य विद्यालय, पद्मश्री श्री परेश रावल।

4
Read further:

This site uses Akismet to reduce spam. Learn how your comment data is processed.

- Advertisment -

Now

Columns

[prisna-google-website-translator]
%d bloggers like this: