The draft of personal data protection bill restricts and imposes conditions on the cross-border transfer of personal data, and suggests setting up of Data Protection Authority of India to prevent any misuse of personal information. Photo: Mint
The draft of personal data protection bill restricts and imposes conditions on the cross-border transfer of personal data, and suggests setting up of Data Protection Authority of India to prevent any misuse of personal information. Photo: Mint

Draft data protection bill may be introduced in winter session of Parliament

The draft data protection bill suggest steps for safeguarding personal information, defining obligations of data processors as also rights of individuals, and proposed penalties for violation

New Delhi: The government is hopeful of introducing the draft personal data protection bill in the ensuing winter session of Parliament, a senior IT ministry official said on Monday.

The draft personal data protection bill was drafted by a high-level panel headed by Justice B.N. Srikrishna and following the submission of the draft bill and data protection report in July end, the IT ministry had sought public feedback on the provisions by 30 September.

The draft bill moots seeking “explicit consent" for processing ‘sensitive personal information’ like religious or political beliefs, sexual orientation and biometric details.

The senior official, who did not wish to be named, told reporters that the ministry is hopeful that the legislation will be introduced in the winter session of Parliament, after taking into account suggestions and feedback received.

Parliament is expected to convene for the winter session in November-December. The draft bill and panel’s recommendations suggest steps for safeguarding personal information, defining obligations of data processors as also rights of individuals, and proposed penalties for violation.

The areas covered by the recommendations include consent, what comprises personal data including sensitive personal data, exemptions which can be granted, grounds for processing data, storage restrictions for personal data, individual rights and right to be forgotten.

The draft of Personal Data Protection Bill, 2018 restricts and imposes conditions on the cross-border transfer of personal data, and suggests setting up of Data Protection Authority of India to prevent any misuse of personal information. It provides for a penalty of 15 crore or 4% of the total worldwide turnover of any data collection entity, including the state, for violation of personal data processing provisions. Failure to take prompt action on a data security breach can attract a penalty of up to 5 crore or 2% of turnover, whichever is higher.

Close