Data privacy authority

 

The Justice B N Srikrishna Committee, formed to draft a data protection and privacy Bill, in a white paper suggested setting up a data protection authority, data audit, registration of data collectors, enacting provisions for protecting children’s personal data, defining penalties and compensation in the case of a data breach.

The committee, which studied the privacy and data protection laws of many countries, including the US, Singapore, Australia and the EU, has released an over 200-page document inviting comments from the public on various issues such as the definition of personal data and proposed penalties for misuse of data. The deadline for sending feedback is December 31, implying the government is unlikely to table a data protection Bill in the winter session of Parliament.

What
  1. The Srikrishna Committee was set up on July 31 following a government decision to make Aadhaar compulsory for all its services. The government gave the panel three months to suggest a draft Bill.
  2. Despite an obligation to adopt adequate security safeguards, no database is 100 per cent secure. In light of this, the interplay between any proposed data protection framework and the existing Aadhaar framework will have to be analysed.
  3. The Unique Identification Authority of India (UIDAI) has issued a 12-digit unique identification number called Aadhaar to over 1 billion people after collecting their personal and biometric data.
  4. The Aadhaar number is now used by both the government and private entities for the purpose of authentication and financial transactions.
  5. Though the UIDAI has various in-built data protection mechanisms, it is not bound to inform an individual in cases of misuse or theft of his or her data.
  6. The Committee, which has met thrice since its formation, is of the opinion that both the government and the private entities be brought under the ambit of the proposed law.
  7. At present only private or corporate entities are governed by the Reasonable Security Practices and Sensitive Personal Data or Information Rules under the Information Technology Act.
  8. The Committee appears to be taking a middle path between the EU privacy law, where protection of personal data is equated with protecting the fundamental right to privacy, and the US law, which focuses on protecting the individual from excessive state regulation.
  9. The Committee has divided the white paper into three substantive parts, including scope and exemptions; grounds for processing, obligation on entities and individual rights; and regulation and enforcement.
  10. The Committee is of the view that certain exemptions should be granted by law for collecting information for investigating a crime, apprehension or prosecution of offenders, and maintaining national security and public order. But the paper stated, “An effective review mechanism must be devised.”
  11. The panel suggested strict penalties be imposed on data controllers in cases of violation. A civil penalty of a specific amount may be imposed on the data controller for each day such violation continues, which may or may not be subject to an upper limit.
  12. An upper limit may be a fixed amount or may be linked to a variable parameter, such as a percentage of the annual turnover of the defaulting data controller

Announcement

  • *Timing Schedule of Ignited Minds Karan Nagar Campus for Tomorrow 17th December 2017 (Sunday)* Read more

  • Result of Scholarship Test NEET & JEE Read more

  • Result of Scholarship Test Result – 11th Class Read more

  • Proudly announces coaching for 8th , 9th and 10th Read more

© 2017 Copyright Ignited Minds Academy . All Rights Reserved.

Developed by Marina Technology