Government hopeful of introducing draft data protection bill in winter session of Parliament

The senior official, who did not wish to be named, told reporters that the ministry is hopeful that the legislation will be introduced in the winter session of Parliament, after taking into account suggestions and feedback received.

Parliament is expected to convene for the winter session in November-December.

The draft bill and panel's recommendations suggest steps for safeguarding personal information, defining obligations of data processors as also rights of individuals, and proposed penalties for violation.

The areas covered by the recommendations include consent, what comprises personal data including sensitive personal data, exemptions which can be granted, grounds for processing data, storage restrictions for personal data, individual rights and right to be forgotten.

The draft of Personal Data Protection Bill, 2018 restricts and imposes conditions on the cross-border transfer of personal data, and suggests setting up of Data Protection Authority of India to prevent any misuse of personal information.

It provides for a penalty of Rs 15 crore or 4 percent of the total worldwide turnover of any data collection entity, including the state, for violation of personal data processing provisions. Failure to take prompt action on a data security breach can attract a penalty of up to Rs 5 crore or 2 percent of turnover, whichever is higher.