Personal Data Protection Bill, 2019 - Revision history

Ajay Kumar: Updated the article +/-

2023-09-25T18:52:30Z

Updated the article +/-

UpdateBot: robot: Update article (please report if you notice any mistake or error in this edit)

2022-05-29T17:39:04Z

robot: Update article (please report if you notice any mistake or error in this edit)

← Older revision		Revision as of 23:09, 29 May 2022
Line 1:		Line 1:
	{{Short description\|Data Protection Bill of India}}{{Use dmy dates\|date=May 2019}}		{{Short description\|Data Protection Bill of India}}
			{{Use dmy dates\|date=May 2019}}
	{{Use Indian English\|date=May 2019}}		{{Use Indian English\|date=May 2019}}
	{{Infobox legislation		{{Infobox legislation
Line 25:		Line 26:
	\| status = Pending		\| status = Pending
	}}		}}
	The '''Personal Data Protection Bill 2019 (PDP Bill 2019)''' was tabled in the Indian Parliament by the [[Ministry of Electronics and Information Technology]] on 11 December 2019.<ref name=":0" /> As of March, 2020 the Bill is being analyzed by a [[Joint Parliamentary Committee]] (JPC) in consultation with experts and stakeholders. The JPC, which was set up in December, 2019, is headed by BJP Member of Parliament (MP) [[Meenakshi Lekhi]]. While the JPC was tasked with a short deadline to finalize the draft law before the Budget Session of 2020, it has sought more time to study the Bill and consult stakeholders.<ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/jpc-wants-more-time-to-submit-data-bill-note/articleshow/74800912.cms?from=mdr\|title=Joint parliamentary committee wants more time to submit data bill note\|newspaper=The Economic Times\|last1=Agarwal\|first1=Surabhi}}</ref> <ref>{{Cite web\|url=https://pib.gov.in/PressReleasePage.aspx?PRID=1601695\|title = Joint Committee on the Personal Data Protection Bill, 2019 seeks views and suggestions}}</ref><ref>{{Cite web\|url=https://www.businesstoday.in/current/economy-politics/personal-data-protection-bill-expect-more-tweaks-post-parliament-panel-consultations/story/392160.html\|title=Personal Data Protection Bill: More drama ahead\|last=Das\|first=Goutam\|date=17 December 2019\|website=Business Today\|access-date=2019-12-21}}</ref>		The '''Personal Data Protection Bill 2019 (PDP Bill 2019)''' was tabled in the Indian Parliament by the [[Ministry of Electronics and Information Technology]] on 11 December 2019.<ref name=":0" /> As of March, 2020 the Bill is being analyzed by a [[Joint Parliamentary Committee]] (JPC) in consultation with experts and stakeholders. The JPC, which was set up in December, 2019, is headed by BJP Member of Parliament (MP) [[Meenakshi Lekhi]]. While the JPC was tasked with a short deadline to finalize the draft law before the Budget Session of 2020, it has sought more time to study the Bill and consult stakeholders.<ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/jpc-wants-more-time-to-submit-data-bill-note/articleshow/74800912.cms?from=mdr\|title=Joint parliamentary committee wants more time to submit data bill note\|newspaper=The Economic Times\|last1=Agarwal\|first1=Surabhi}}</ref><ref>{{Cite web\|url=https://pib.gov.in/PressReleasePage.aspx?PRID=1601695\|title = Joint Committee on the Personal Data Protection Bill, 2019 seeks views and suggestions}}</ref><ref>{{Cite web\|url=https://www.businesstoday.in/current/economy-politics/personal-data-protection-bill-expect-more-tweaks-post-parliament-panel-consultations/story/392160.html\|title=Personal Data Protection Bill: More drama ahead\|last=Das\|first=Goutam\|date=17 December 2019\|website=Business Today\|access-date=2019-12-21}}</ref>

	The Bill covers mechanisms for protection of personal data and proposes the setting up of a '''Data Protection Authority of India''' for the same.<ref name=":0">{{Cite web\|url=http://prsindia.org/billtrack/personal-data-protection-bill-2019\|title=The Personal Data Protection Bill, 2019\|date=2019-12-11\|website=PRSIndia\|language=en\|access-date=2019-12-21}}</ref> Some key provisions the 2019 Bill provides for which the 2018 draft Bill did not, such as that the central government can exempt any government agency from the Bill and the [[Right to be forgotten\|Right to Be Forgotten]], have been included.<ref>{{Cite web\|url=https://sflc.in/key-changes-personal-data-protection-bill-2019-srikrishna-committee-draft\|title=Key Changes in the Personal Data Protection Bill, 2019 from the Srikrishna Committee Draft\|website=SFLC.in\|language=en\|access-date=2019-12-21}}</ref><ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/data-protection-bill-centre-has-the-power-to-exempt-any-government-agency-from-application-of-act/articleshow/72454669.cms\|title=Data Protection Bill: Centre has the power to exempt any government agency from application of Act\|last=Mandavia\|first=Megha\|date=2019-12-10\|work=The Economic Times\|access-date=2019-12-10}}</ref>		The Bill covers mechanisms for protection of personal data and proposes the setting up of a '''Data Protection Authority of India''' for the same.<ref name=":0">{{Cite web\|url=http://prsindia.org/billtrack/personal-data-protection-bill-2019\|title=The Personal Data Protection Bill, 2019\|date=2019-12-11\|website=PRSIndia\|language=en\|access-date=2019-12-21}}</ref> Some key provisions the 2019 Bill provides for which the 2018 draft Bill did not, such as that the central government can exempt any government agency from the Bill and the [[Right to be forgotten\|Right to Be Forgotten]], have been included.<ref>{{Cite web\|url=https://sflc.in/key-changes-personal-data-protection-bill-2019-srikrishna-committee-draft\|title=Key Changes in the Personal Data Protection Bill, 2019 from the Srikrishna Committee Draft\|website=SFLC.in\|language=en\|access-date=2019-12-21}}</ref><ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/data-protection-bill-centre-has-the-power-to-exempt-any-government-agency-from-application-of-act/articleshow/72454669.cms\|title=Data Protection Bill: Centre has the power to exempt any government agency from application of Act\|last=Mandavia\|first=Megha\|date=2019-12-10\|work=The Economic Times\|access-date=2019-12-10}}</ref>
Line 34:		Line 35:
	== Provisions ==		== Provisions ==
	The Bill aims to:<ref>[http://164.100.47.4/BillsTexts/LSBillTexts/Asintroduced/373_2019_LS_Eng.pdf The Personal Data Protection Bill, 2019]</ref>		The Bill aims to:<ref>[http://164.100.47.4/BillsTexts/LSBillTexts/Asintroduced/373_2019_LS_Eng.pdf The Personal Data Protection Bill, 2019]</ref>
	{{~~Quote~~\|text=to provide for protection of the privacy of individuals relating to their personal data, specify the flow and usage of personal data, create a relationship of trust between persons and entities processing the personal data, protect the fundamental rights of individuals whose personal data are processed, to create a framework for organisational and technical measures in processing of data, laying down norms for social media intermediary, cross-border transfer, accountability of entities processing personal data, remedies for unauthorised and harmful processing, and to establish a Data Protection Authority of India for the said purposes and for matters connected there with or incidental thereto.\|sign=\|source=}}		{{Blockquote\|text=to provide for protection of the privacy of individuals relating to their personal data, specify the flow and usage of personal data, create a relationship of trust between persons and entities processing the personal data, protect the fundamental rights of individuals whose personal data are processed, to create a framework for organisational and technical measures in processing of data, laying down norms for social media intermediary, cross-border transfer, accountability of entities processing personal data, remedies for unauthorised and harmful processing, and to establish a Data Protection Authority of India for the said purposes and for matters connected there with or incidental thereto.\|sign=\|source=}}

	== Criticism ==		== Criticism ==
Line 45:		Line 46:
	[[Forbes India]] reports that "there are concerns that the Bill [...] gives the government blanket powers to access citizens' data."<ref>{{Cite web\|url=http://www.forbesindia.com/article/leaderboard/the-personal-data-protection-bill-could-be-a-serious-threat-to-indians-privacy/56623/1\|title=The Personal Data Protection Bill could be a serious threat to Indians' privacy\|website=Forbes India\|language=en\|access-date=2019-12-21}}</ref>		[[Forbes India]] reports that "there are concerns that the Bill [...] gives the government blanket powers to access citizens' data."<ref>{{Cite web\|url=http://www.forbesindia.com/article/leaderboard/the-personal-data-protection-bill-could-be-a-serious-threat-to-indians-privacy/56623/1\|title=The Personal Data Protection Bill could be a serious threat to Indians' privacy\|website=Forbes India\|language=en\|access-date=2019-12-21}}</ref>

	[[Jaiveer Shergill]], a prominent Supreme Court Lawyer has shared the pitfalls and gaps of the current version of the draft bill. There are serious loopholes of how the bill is unable to identify the scope of governmental bodies in distinguishing who has access to the personal data of the citizens and missing state bodies to monitor the personal data. <ref>{{Cite web\|url= https://www.thehindu.com/opinion/op-ed/control-rather-than-privacy/article38209039.ece\|title=Control rather than privacy \|website=The Hindu\|language=en\|access-date=2021-01-10}}</ref>		[[Jaiveer Shergill]], a prominent Supreme Court Lawyer has shared the pitfalls and gaps of the current version of the draft bill. There are serious loopholes of how the bill is unable to identify the scope of governmental bodies in distinguishing who has access to the personal data of the citizens and missing state bodies to monitor the personal data.<ref>{{Cite web\|url= https://www.thehindu.com/opinion/op-ed/control-rather-than-privacy/article38209039.ece\|title=Control rather than privacy \|website=The Hindu\|language=en\|access-date=2021-01-10}}</ref>

	== See also ==		== See also ==
Line 64:		Line 65:
	* [https://dataprotectionindia.in/act/ Personal Data Protection Bill 2019]		* [https://dataprotectionindia.in/act/ Personal Data Protection Bill 2019]
	* [https://www.isolve.in/personal-data-protection-bill-2019-compliance-tech-companies/ PDP Bill 2019: Impact on tech companies]		* [https://www.isolve.in/personal-data-protection-bill-2019-compliance-tech-companies/ PDP Bill 2019: Impact on tech companies]
	~~{{Indian legislation\|state=collapsed}}~~

	[[Category:Information privacy]]		[[Category:Information privacy]]
	[[Category:Data laws of Asia]]		[[Category:Data laws of Asia]]
	[[Category:Data protection]]		[[Category:Data protection]]
	[[Category:Law in India]]		[[Category:Law of India]]
	[[Category:Computing legislation]]		[[Category:Computing legislation]]
	[[Category:Information technology in India]]		[[Category:Information technology in India]]

->Shekbhi1: /* Criticism */Updated title of citation 22

2022-01-10T05:29:17Z

Criticism: Updated title of citation 22

← Older revision		Revision as of 10:59, 10 January 2022
Line 25:		Line 25:
	\| status = Pending		\| status = Pending
	}}		}}
	The '''Personal Data Protection Bill 2019 (PDP Bill 2019)''' was tabled in the Indian Parliament by the [[Ministry of Electronics and Information Technology]] on 11 December 2019.<ref name=":0" /> As of March, 2020 the Bill is being analyzed by a [[Joint Parliamentary Committee]] (JPC) in consultation with experts and stakeholders. The JPC, which was set up in December, 2019, is headed by BJP Member of Parliament (MP) [[Meenakshi Lekhi]]. While the JPC was tasked with a short deadline to finalize the draft law before the Budget Session of 2020, it has sought more time to study the Bill and consult stakeholders.<ref>https://economictimes.indiatimes.com/tech/internet/jpc-wants-more-time-to-submit-data-bill-note/articleshow/74800912.cms?from=mdr</ref> <ref>https://pib.gov.in/PressReleasePage.aspx?PRID=1601695</ref><ref>{{Cite web\|url=https://www.businesstoday.in/current/economy-politics/personal-data-protection-bill-expect-more-tweaks-post-parliament-panel-consultations/story/392160.html\|title=Personal Data Protection Bill: More drama ahead\|last=Das\|first=Goutam\|date=17 December 2019\|website=Business Today\|access-date=2019-12-21}}</ref>		The '''Personal Data Protection Bill 2019 (PDP Bill 2019)''' was tabled in the Indian Parliament by the [[Ministry of Electronics and Information Technology]] on 11 December 2019.<ref name=":0" /> As of March, 2020 the Bill is being analyzed by a [[Joint Parliamentary Committee]] (JPC) in consultation with experts and stakeholders. The JPC, which was set up in December, 2019, is headed by BJP Member of Parliament (MP) [[Meenakshi Lekhi]]. While the JPC was tasked with a short deadline to finalize the draft law before the Budget Session of 2020, it has sought more time to study the Bill and consult stakeholders.<ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/jpc-wants-more-time-to-submit-data-bill-note/articleshow/74800912.cms?from=mdr\|title=Joint parliamentary committee wants more time to submit data bill note\|newspaper=The Economic Times\|last1=Agarwal\|first1=Surabhi}}</ref> <ref>{{Cite web\|url=https://pib.gov.in/PressReleasePage.aspx?PRID=1601695\|title = Joint Committee on the Personal Data Protection Bill, 2019 seeks views and suggestions}}</ref><ref>{{Cite web\|url=https://www.businesstoday.in/current/economy-politics/personal-data-protection-bill-expect-more-tweaks-post-parliament-panel-consultations/story/392160.html\|title=Personal Data Protection Bill: More drama ahead\|last=Das\|first=Goutam\|date=17 December 2019\|website=Business Today\|access-date=2019-12-21}}</ref>

	The Bill covers mechanisms for protection of personal data and proposes the setting up of a '''Data Protection Authority of India''' for the same.<ref name=":0">{{Cite web\|url=http://prsindia.org/billtrack/personal-data-protection-bill-2019\|title=The Personal Data Protection Bill, 2019\|date=2019-12-11\|website=PRSIndia\|language=en\|access-date=2019-12-21}}</ref> Some key provisions the 2019 Bill provides for which the 2018 draft Bill did not, such as that the central government can exempt any government agency from the Bill and the [[Right to be forgotten\|Right to Be Forgotten]], have been included.<ref>{{Cite web\|url=https://sflc.in/key-changes-personal-data-protection-bill-2019-srikrishna-committee-draft\|title=Key Changes in the Personal Data Protection Bill, 2019 from the Srikrishna Committee Draft\|website=SFLC.in\|language=en\|access-date=2019-12-21}}</ref><ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/data-protection-bill-centre-has-the-power-to-exempt-any-government-agency-from-application-of-act/articleshow/72454669.cms\|title=Data Protection Bill: Centre has the power to exempt any government agency from application of Act\|last=Mandavia\|first=Megha\|date=2019-12-10\|work=The Economic Times\|access-date=2019-12-10}}</ref>		The Bill covers mechanisms for protection of personal data and proposes the setting up of a '''Data Protection Authority of India''' for the same.<ref name=":0">{{Cite web\|url=http://prsindia.org/billtrack/personal-data-protection-bill-2019\|title=The Personal Data Protection Bill, 2019\|date=2019-12-11\|website=PRSIndia\|language=en\|access-date=2019-12-21}}</ref> Some key provisions the 2019 Bill provides for which the 2018 draft Bill did not, such as that the central government can exempt any government agency from the Bill and the [[Right to be forgotten\|Right to Be Forgotten]], have been included.<ref>{{Cite web\|url=https://sflc.in/key-changes-personal-data-protection-bill-2019-srikrishna-committee-draft\|title=Key Changes in the Personal Data Protection Bill, 2019 from the Srikrishna Committee Draft\|website=SFLC.in\|language=en\|access-date=2019-12-21}}</ref><ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/data-protection-bill-centre-has-the-power-to-exempt-any-government-agency-from-application-of-act/articleshow/72454669.cms\|title=Data Protection Bill: Centre has the power to exempt any government agency from application of Act\|last=Mandavia\|first=Megha\|date=2019-12-10\|work=The Economic Times\|access-date=2019-12-10}}</ref>
Line 37:		Line 37:

	== Criticism ==		== Criticism ==
	The revised 2019 Bill was criticized by Justice [[B. N. Srikrishna]], the drafter of the original Bill, as having the ability to turn India into an “[[Orwellian\|Orwellian State]]".{{Efn\|Orwellian State is a term to denote draconian control of its people by a state as described in the novel ‘Nineteen Eighty Four’ by George Orwell.\|name=\|group=}}<ref name=":1">{{Cite news\|url=https://economictimes.indiatimes.com/news/economy/policy/personal-data-protection-bill-can-turn-india-into-orwellian-state-justice-bn-srikrishna/articleshow/72483355.cms\|title=Personal Data Protection Bill can turn India into ~~‘Orwellian State’~~: Justice BN Srikrishna\|last=Mandavia\|first=Megha\|date=2019-12-12\|work=The Economic Times\|access-date=2019-12-21}}</ref> In an interview with Economic Times, Srikrishna said that, "The government can at any time access private data or government agency data on grounds of sovereignty or public order. This has dangerous implications.”<ref name=":1" /> This view is shared by a think tank in their comment number 3.<ref>{{Cite web\|url=https://www.dvara.com/blog/2020/01/17/our-initial-comments-on-the-personal-data-protection-bill-2019/\|title=Our initial comments on the Personal Data Protection Bill 2019\|date=17 January 2020\|website=Dvara Research\|language=en\|access-date=20 January 2020}}</ref>		The revised 2019 Bill was criticized by Justice [[B. N. Srikrishna]], the drafter of the original Bill, as having the ability to turn India into an “[[Orwellian\|Orwellian State]]".{{Efn\|Orwellian State is a term to denote draconian control of its people by a state as described in the novel ‘Nineteen Eighty Four’ by George Orwell.\|name=\|group=}}<ref name=":1">{{Cite news\|url=https://economictimes.indiatimes.com/news/economy/policy/personal-data-protection-bill-can-turn-india-into-orwellian-state-justice-bn-srikrishna/articleshow/72483355.cms\|title=Personal Data Protection Bill can turn India into 'Orwellian State': Justice BN Srikrishna\|last=Mandavia\|first=Megha\|date=2019-12-12\|work=The Economic Times\|access-date=2019-12-21}}</ref> In an interview with Economic Times, Srikrishna said that, "The government can at any time access private data or government agency data on grounds of sovereignty or public order. This has dangerous implications.”<ref name=":1" /> This view is shared by a think tank in their comment number 3.<ref>{{Cite web\|url=https://www.dvara.com/blog/2020/01/17/our-initial-comments-on-the-personal-data-protection-bill-2019/\|title=Our initial comments on the Personal Data Protection Bill 2019\|date=17 January 2020\|website=Dvara Research\|language=en\|access-date=20 January 2020}}</ref>

	Fresh criticism on the international level comes from an advisor to a group proposing an alternative text.<ref>{{Cite ~~web~~\|first1= Gautam \| last1= Bhatia \|url=https://www.foreignaffairs.com/articles/india/2020-02-19/indias-growing-surveillance-state\|title=~~India’s~~ Growing Surveillance State: New Technologies Threaten Freedoms in the ~~World’s~~ Largest Democracy\|date=February 19, 2020\|website=Foreign Affairs\|language=en\|access-date=February 21, 2020}}</ref> A moderately critical summary is available from an India scholar working with an American co-author.<ref>{{Cite web\|first1= Arindrajit \| last1= Basu \| first2= Justin\| last2=Sherman \|url=https://www.lawfareblog.com/key-global-takeaways-indias-revised-personal-data-protection-bill\|date=January 23, 2020\|website=Lawfare blog\|title=Key Global Takeaways From India's Revised Personal Data Protection Bill\|language=en\|access-date=February 23, 2020}}</ref>		Fresh criticism on the international level comes from an advisor to a group proposing an alternative text.<ref>{{Cite magazine\|first1= Gautam \| last1= Bhatia \|url=https://www.foreignaffairs.com/articles/india/2020-02-19/indias-growing-surveillance-state\|title=India's Growing Surveillance State: New Technologies Threaten Freedoms in the World's Largest Democracy\|date=February 19, 2020\|website=Foreign Affairs\|language=en\|access-date=February 21, 2020}}</ref> A moderately critical summary is available from an India scholar working with an American co-author.<ref>{{Cite web\|first1= Arindrajit \| last1= Basu \| first2= Justin\| last2=Sherman \|url=https://www.lawfareblog.com/key-global-takeaways-indias-revised-personal-data-protection-bill\|date=January 23, 2020\|website=Lawfare blog\|title=Key Global Takeaways From India's Revised Personal Data Protection Bill\|language=en\|access-date=February 23, 2020}}</ref>

	The role of social media intermediaries is being regulated more tightly on several fronts. The [[Wikimedia Foundation]] is hoping that the PDP bill will prove the lesser evil compared with the [[Information Technology (Intermediary Guidelines (Amendment) Rules) 2018\|Draft Information Technology [Intermediary Guidelines (Amendment) Rules] 2018]].<ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/wikimedia-flags-worries-on-data-law/articleshow/72988168.cms \|title=Wikimedia flags worries on data law \|last=Agarwal\|first=Surabhi\|date=27 December 2019\|work=The Economic Times\|access-date=28 December 2019}}</ref><ref>{{Cite web\|url=http://prsindia.org/billtrack/draft-information-technology-intermediaries-guidelines-amendment-rules-2018\|title=Draft Information Technology [Intermediaries Guidelines (Amendment) Rules] 2018\|date=2019-01-30\|website=PRSIndia\|language=en\|access-date=2020-01-02}}</ref>		The role of social media intermediaries is being regulated more tightly on several fronts. The [[Wikimedia Foundation]] is hoping that the PDP bill will prove the lesser evil compared with the [[Information Technology (Intermediary Guidelines (Amendment) Rules) 2018\|Draft Information Technology [Intermediary Guidelines (Amendment) Rules] 2018]].<ref>{{Cite news\|url=https://economictimes.indiatimes.com/tech/internet/wikimedia-flags-worries-on-data-law/articleshow/72988168.cms \|title=Wikimedia flags worries on data law \|last=Agarwal\|first=Surabhi\|date=27 December 2019\|work=The Economic Times\|access-date=28 December 2019}}</ref><ref>{{Cite web\|url=http://prsindia.org/billtrack/draft-information-technology-intermediaries-guidelines-amendment-rules-2018\|title=Draft Information Technology [Intermediaries Guidelines (Amendment) Rules] 2018\|date=2019-01-30\|website=PRSIndia\|language=en\|access-date=2020-01-02}}</ref>

	[[Forbes India]] reports that "there are concerns that the Bill [...] gives the government blanket powers to access citizens' data."<ref>{{Cite web\|url=http://www.forbesindia.com/article/leaderboard/the-personal-data-protection-bill-could-be-a-serious-threat-to-indians-privacy/56623/1\|title=The Personal Data Protection Bill could be a serious threat to Indians' privacy\|website=Forbes India\|language=en\|access-date=2019-12-21}}</ref>		[[Forbes India]] reports that "there are concerns that the Bill [...] gives the government blanket powers to access citizens' data."<ref>{{Cite web\|url=http://www.forbesindia.com/article/leaderboard/the-personal-data-protection-bill-could-be-a-serious-threat-to-indians-privacy/56623/1\|title=The Personal Data Protection Bill could be a serious threat to Indians' privacy\|website=Forbes India\|language=en\|access-date=2019-12-21}}</ref>

			[[Jaiveer Shergill]], a prominent Supreme Court Lawyer has shared the pitfalls and gaps of the current version of the draft bill. There are serious loopholes of how the bill is unable to identify the scope of governmental bodies in distinguishing who has access to the personal data of the citizens and missing state bodies to monitor the personal data. <ref>{{Cite web\|url= https://www.thehindu.com/opinion/op-ed/control-rather-than-privacy/article38209039.ece\|title=Control rather than privacy \|website=The Hindu\|language=en\|access-date=2021-01-10}}</ref>

	== See also ==		== See also ==

2409:4063:231C:B6B5:593A:5371:A44C:8B28 at 03:45, 23 June 2021

2021-06-23T03:45:30Z

New page

{{Short description|Data Protection Bill of India}}{{Use dmy dates|date=May 2019}}
{{Use Indian English|date=May 2019}}
{{Infobox legislation
| short_title = Personal Data Protection Bill 2019
| legislature =
| imagesize = 100
| imagealt = Personal Data Protection Bill 2019
| long_title = Personal Data Protection Bill 2019
| citation =
| territorial_extent = [[India]]
| enacted_by = [[Parliament of India]]
| date_enacted =
| date_assented =
| date_commenced =
| bill =
| bill_citation =
| bill_date = 11 December 2019
| introduced_by = [[Ravi Shankar Prasad]] {{small|[[Ministry of Electronics and Information Technology|Minister of Electronics and Information]]}}
| 1st_reading =
| 2nd_reading =
| 3rd_reading =
| committee_report = Joint Parliamentary Committee (JPC) on Personal Data Protection
| summary =
| keywords =
| status = Pending
}}
The '''Personal Data Protection Bill 2019 (PDP Bill 2019)''' was tabled in the Indian Parliament by the [[Ministry of Electronics and Information Technology]] on 11 December 2019.<ref name=":0" /> As of March, 2020 the Bill is being analyzed by a [[Joint Parliamentary Committee]] (JPC) in consultation with experts and stakeholders. The JPC, which was set up in December, 2019, is headed by BJP Member of Parliament (MP) [[Meenakshi Lekhi]]. While the JPC was tasked with a short deadline to finalize the draft law before the Budget Session of 2020, it has sought more time to study the Bill and consult stakeholders.<ref>https://economictimes.indiatimes.com/tech/internet/jpc-wants-more-time-to-submit-data-bill-note/articleshow/74800912.cms?from=mdr</ref> <ref>https://pib.gov.in/PressReleasePage.aspx?PRID=1601695</ref><ref>{{Cite web|url=https://www.businesstoday.in/current/economy-politics/personal-data-protection-bill-expect-more-tweaks-post-parliament-panel-consultations/story/392160.html|title=Personal Data Protection Bill: More drama ahead|last=Das|first=Goutam|date=17 December 2019|website=Business Today|access-date=2019-12-21}}</ref>

The Bill covers mechanisms for protection of personal data and proposes the setting up of a '''Data Protection Authority of India''' for the same.<ref name=":0">{{Cite web|url=http://prsindia.org/billtrack/personal-data-protection-bill-2019|title=The Personal Data Protection Bill, 2019|date=2019-12-11|website=PRSIndia|language=en|access-date=2019-12-21}}</ref> Some key provisions the 2019 Bill provides for which the 2018 draft Bill did not, such as that the central government can exempt any government agency from the Bill and the [[Right to be forgotten|Right to Be Forgotten]], have been included.<ref>{{Cite web|url=https://sflc.in/key-changes-personal-data-protection-bill-2019-srikrishna-committee-draft|title=Key Changes in the Personal Data Protection Bill, 2019 from the Srikrishna Committee Draft|website=SFLC.in|language=en|access-date=2019-12-21}}</ref><ref>{{Cite news|url=https://economictimes.indiatimes.com/tech/internet/data-protection-bill-centre-has-the-power-to-exempt-any-government-agency-from-application-of-act/articleshow/72454669.cms|title=Data Protection Bill: Centre has the power to exempt any government agency from application of Act|last=Mandavia|first=Megha|date=2019-12-10|work=The Economic Times|access-date=2019-12-10}}</ref>

== Background ==
In July 2017, the [[Ministry of Electronics and Information Technology]] set up a committee to study issues related to data protection. The committee was chaired by retired [[Supreme Court of India|Supreme Court]] judge Justice [[B. N. Srikrishna]].<ref>{{Cite web|url=https://indianexpress.com/article/technology/tech-news-technology/personal-data-protection-bill-2018-justice-srikrishna-data-protection-report-submitted-to-meity-5279972/|title=Personal Data Protection Bill 2018 draft submitted by Justice Srikrishna Committee: Here is what it says|date=2018-07-28|website=The Indian Express|language=en-IN|access-date=2019-12-04}}</ref> The committee submitted the draft '''Personal Data Protection Bill, 2018'''<ref>{{Cite web|url=https://meity.gov.in/writereaddata/files/Personal_Data_Protection_Bill,2018.pdf|title=Personal Data Protection Bill 2018|website=MEITY|language=en|access-date=2019-12-11}}</ref> in July 2018.<ref>{{Cite web|url=https://www.pwc.in/consulting/cyber-security/data-privacy/personal-data-protection-bill-2019-what-you-need-to-know.html|title=Data Privacy Bill 2019: All you need to know|last=[[PricewaterhouseCoopers]]|website=PwC|language=en-in|access-date=2019-12-21}}</ref><ref>{{Cite web|url=http://prsindia.org/billtrack/draft-personal-data-protection-bill-2018|title=Draft Personal Data Protection Bill, 2018|date=2018-07-30|website=PRSIndia|language=en|access-date=2019-12-21}}</ref><ref>{{Cite web|url=https://www.pwc.in/consulting/cyber-security/blogs/decoding-the-personal-data-protection-bill-2018-for-individuals-and-businesses.html|title=Decoding the Personal Data Protection Bill, 2018, for individuals and businesses|last=PricewaterhouseCoopers|website=PwC|language=en-in|access-date=2019-12-21}}</ref> After further deliberations the Bill was approved by the cabinet ministry of [[India]] on 4 December 2019<ref>{{Cite news|url=https://economictimes.indiatimes.com/news/economy/policy/union-cabinet-clears-personal-data-protection-bill/articleshow/72363463.cms|title=Union Cabinet clears Personal Data Protection Bill. Major takeaways from Cabinet meet|date=2019-12-04|work=The Economic Times|access-date=2019-12-04}}</ref><ref>{{Cite news|url=https://www.thehindu.com/news/national/cabinet-approves-personal-data-protection-bill/article30160306.ece|title=Cabinet approves Personal Data Protection Bill|date=2019-12-04|work=The Hindu|access-date=2019-12-04|others=PTI|language=en-IN|issn=0971-751X}}</ref> as the '''Personal Data Protection Bill 2019''' and tabled in the Lok Sabha on 11 December 2019.<ref name=":0" />

== Provisions ==
The Bill aims to:<ref>[http://164.100.47.4/BillsTexts/LSBillTexts/Asintroduced/373_2019_LS_Eng.pdf The Personal Data Protection Bill, 2019]</ref>
{{Quote|text=to provide for protection of the privacy of individuals relating to their personal data, specify the flow and usage of personal data, create a relationship of trust between persons and entities processing the personal data, protect the fundamental rights of individuals whose personal data are processed, to create a framework for organisational and technical measures in processing of data, laying down norms for social media intermediary, cross-border transfer, accountability of entities processing personal data, remedies for unauthorised and harmful processing, and to establish a Data Protection Authority of India for the said purposes and for matters connected there with or incidental thereto.|sign=|source=}}

== Criticism ==
The revised 2019 Bill was criticized by Justice [[B. N. Srikrishna]], the drafter of the original Bill, as having the ability to turn India into an “[[Orwellian|Orwellian State]]".{{Efn|Orwellian State is a term to denote draconian control of its people by a state as described in the novel ‘Nineteen Eighty Four’ by George Orwell.|name=|group=}}<ref name=":1">{{Cite news|url=https://economictimes.indiatimes.com/news/economy/policy/personal-data-protection-bill-can-turn-india-into-orwellian-state-justice-bn-srikrishna/articleshow/72483355.cms|title=Personal Data Protection Bill can turn India into ‘Orwellian State’: Justice BN Srikrishna|last=Mandavia|first=Megha|date=2019-12-12|work=The Economic Times|access-date=2019-12-21}}</ref> In an interview with Economic Times, Srikrishna said that, "The government can at any time access private data or government agency data on grounds of sovereignty or public order. This has dangerous implications.”<ref name=":1" /> This view is shared by a think tank in their comment number 3.<ref>{{Cite web|url=https://www.dvara.com/blog/2020/01/17/our-initial-comments-on-the-personal-data-protection-bill-2019/|title=Our initial comments on the Personal Data Protection Bill 2019|date=17 January 2020|website=Dvara Research|language=en|access-date=20 January 2020}}</ref>

Fresh criticism on the international level comes from an advisor to a group proposing an alternative text.<ref>{{Cite web|first1= Gautam | last1= Bhatia |url=https://www.foreignaffairs.com/articles/india/2020-02-19/indias-growing-surveillance-state|title=India’s Growing Surveillance State: New Technologies Threaten Freedoms in the World’s Largest Democracy|date=February 19, 2020|website=Foreign Affairs|language=en|access-date=February 21, 2020}}</ref> A moderately critical summary is available from an India scholar working with an American co-author.<ref>{{Cite web|first1= Arindrajit | last1= Basu | first2= Justin| last2=Sherman |url=https://www.lawfareblog.com/key-global-takeaways-indias-revised-personal-data-protection-bill|date=January 23, 2020|website=Lawfare blog|title=Key Global Takeaways From India's Revised Personal Data Protection Bill|language=en|access-date=February 23, 2020}}</ref>

The role of social media intermediaries is being regulated more tightly on several fronts. The [[Wikimedia Foundation]] is hoping that the PDP bill will prove the lesser evil compared with the [[Information Technology (Intermediary Guidelines (Amendment) Rules) 2018|Draft Information Technology [Intermediary Guidelines (Amendment) Rules] 2018]].<ref>{{Cite news|url=https://economictimes.indiatimes.com/tech/internet/wikimedia-flags-worries-on-data-law/articleshow/72988168.cms |title=Wikimedia flags worries on data law |last=Agarwal|first=Surabhi|date=27 December 2019|work=The Economic Times|access-date=28 December 2019}}</ref><ref>{{Cite web|url=http://prsindia.org/billtrack/draft-information-technology-intermediaries-guidelines-amendment-rules-2018|title=Draft Information Technology [Intermediaries Guidelines (Amendment) Rules] 2018|date=2019-01-30|website=PRSIndia|language=en|access-date=2020-01-02}}</ref>

[[Forbes India]] reports that "there are concerns that the Bill [...] gives the government blanket powers to access citizens' data."<ref>{{Cite web|url=http://www.forbesindia.com/article/leaderboard/the-personal-data-protection-bill-could-be-a-serious-threat-to-indians-privacy/56623/1|title=The Personal Data Protection Bill could be a serious threat to Indians' privacy|website=Forbes India|language=en|access-date=2019-12-21}}</ref>

== See also ==
* Draft [[Information Technology (Intermediary Guidelines (Amendment) Rules) 2018]]
* UK [[Data Protection Act 2018]]
* EU [[General Data Protection Regulation]]
* UK [[Data Protection Act 1998]]
* [[Data security]]

== Notes ==
{{reflist|group=lower-alpha}}

== References ==
{{Reflist}}

==External links==
* [https://meity.gov.in/writereaddata/files/Personal_Data_Protection_Bill,2018.pdf The draft of the 2018 bill]
* [https://dataprotectionindia.in/act/ Personal Data Protection Bill 2019]
* [https://www.isolve.in/personal-data-protection-bill-2019-compliance-tech-companies/ PDP Bill 2019: Impact on tech companies]
{{Indian legislation|state=collapsed}}

[[Category:Information privacy]]
[[Category:Data laws of Asia]]
[[Category:Data protection]]
[[Category:Law in India]]
[[Category:Computing legislation]]
[[Category:Information technology in India]]
[[Category:Censorship in India]]
[[Category:Internet in India]]
[[Category:2018 in India]]
[[Category:2018 in law]]
[[Category:Medical privacy legislation]]
[[Category:Modi administration]]
[[Category:Cyber Security in India]]