The Draft Digital Personal Data Protection Bill, 2022, has received a positive response from the Parliamentary Standing Committee on IT and Communications. The Bill is aimed at providing guidelines for processing digital personal data while recognizing the right of individuals to protect their personal data. The Bill is expected to cater to the needs of the 760 million active internet users in India, which is projected to grow to 1.2 billion in the coming years.

Purpose of the Bill

The primary purpose of the Bill is to regulate the processing of personal data in a manner that ensures openness, safety, trust, and accountability. The Bill is based on seven principles that are essential to the data economy. These principles include transparency in data collection, data minimization, accuracy of personal data, storage limitation, reasonable safeguards against data breaches, and accountability.

Powers with the Centre

The Centre has been empowered to appoint a data protection board that will play an adjudicating role in enforcing the terms of the Bill. The Centre can also release a white-list of trusted geographies for cross-border data flows. Additionally, the Centre and its agencies are exempted from adhering to the provisions of the Bill concerning national security.

Exemptions

Certain entities that collect users’ personal data, known as data fiduciaries, are exempt from adhering to certain provisions of the Bill. The Centre can notify such entities.

MCQs on Digital Personal Data Protection Bill

  1. What is the purpose of the Digital Personal Data Protection Bill, 2022?
    A. To provide for the processing of digital personal data in a manner that recognizes the right of individuals to protect their personal data
    B. To limit the use of digital personal data by individuals and organizations
    C. To allow unlimited access to digital personal data without any restrictions
    D. None of the above
    Correct Answer: A. To provide for the processing of digital personal data in a manner that recognizes the right of individuals to protect their personal data
    Explanation: The purpose of the Digital Personal Data Protection Bill, 2022 is to provide for the processing of digital personal data in a manner that recognizes the right of individuals to protect their personal data, the need to process personal data for lawful purposes.
  2. Under the draft Digital Personal Data Protection Bill, 2022, what is the principle of “data minimization”?
    A. Collecting only those items of personal data that are needed
    B. Storing personal data perpetually by default
    C. Allowing organizations to be less transparent with users’ personal data
    D. None of the above
    Correct Answer: A. Collecting only those items of personal data that are needed
    Explanation: The principle of “data minimization” under the draft Digital Personal Data Protection Bill, 2022 calls for collecting only those items of personal data that are needed.
  3. What are some concerns with the Digital Personal Data Protection Bill, 2022?
    A. The Indian government and state agencies have several exemptions from the proposed law
    B. The draft law leaves the appointment of the chairperson and members of the Data Protection Board entirely to the discretion of the central government
    C. Government agencies can indefinitely store personal data under certain circumstances
    D. All of the above
    Correct Answer: D. All of the above
    Explanation: Some concerns with the Digital Personal Data Protection Bill, 2022 include the Indian government and state agencies having several exemptions from the proposed law in the interest of national security, the draft law leaving the appointment of the chairperson and members of the Data Protection Board entirely to the discretion of the central government, and government agencies being able to indefinitely store personal data under certain circumstances.

Loading