The Bill applies to digital personal data processing in India, including online and digitized offline data. It extends to processing outside India for offering Indian goods or services.
Personal data needs consent for lawful processing, with exceptions like voluntary sharing or state-related processing.
Data fiduciaries will bear the responsibility of maintaining data accuracy, ensuring data security and deleting data once its intended purpose has been fulfilled.
The Bill bestows certain rights upon individuals, encompassing the right to access information, request data correction and erasure and seek resolution for grievances.
Under certain circumstances, government agencies may be exempted by the Central government from adhering to the provisions of the Bill. These circumstances typically revolve around specific grounds, such as safeguarding the state’s security, maintaining public order and preventing offences.
To oversee compliance with the Bill’s provisions, the Central government will establish the Data Protection Board of India, which will be tasked with adjudicating cases of non-compliance.
Source: Barandbench
