Total Pageviews

Tuesday, August 14, 2018

Government seeks public comments on Data protection bill; September 10 deadline

Two weeks after the draft of the data protection Bill was submitted by the Justice BN Srikrishna committee, the government has invited comments from stakeholders and public on it. Inviting comments on the draft, the ministry of electronics and IT has given time till September 10 which can be posted on the website. 
This follows EU Bill General Data Protection Regulation.

“EU GDPR was an over-reach. The Indian law seems a bit more rational and gets the balance right between the rights of the individual and the public good that comes from the digital economy. Having said that, the clauses on processing of data on reasonable grounds should have been less vague and the bill should have defined some accountability on part of the government when it processes personal data of the users without consent,” Suneeth Katarki, Partner, IndusLaw,

Read both and form your own opinion.

Right to be Forgotten:
GDPR’s Article 17 has outlined the circumstances under which EU citizens can exercise their right to be forgotten or right to erasure. The Article gives individuals the right to get personal data erased under six conditions, including withdrawal of consent to use data, or if data is no longer relevant for the purpose it was collected. However, the request may not be entertained in some situations such as if the request contradicts the right of freedom of expression and information, or when it goes against  public interest in the area of public health, scientific or historical research or statistical purposes. The B.N. Srikrishna Committee report has laid significant emphasis on obtaining the consent of an individual to process and use personal data. The committee said consent must be “informed”, “specific” and “clear”, and needs to be capable of being withdrawn as easily as it was given. 
The draft Personal Data Protection Bill, 2018, has a section on the Right to be Forgotten. But the proposed bill does not provide right to erasure
Section 27 of the bill has listed out three scenarios in which an individual will have the “right to restrict or prevent continuing disclosure of personal data” or the right to be forgotten, in a sense. This will be applicable if data disclosure is no longer necessary, the consent to use data has been withdrawn or if data is being used contrary to the provisions of the law. An adjudicating officer will have to determine the applicability of one of the three scenarios. The officer will also have to determine that the right of the individual to restrict use of her data over-rides the right to freedom of speech or right to information of any other citizen. (Source: Livemint)

No comments: