Data Protection Bill Allows Law Enforcement To Use Personal Data Without Consent

Data Protection Bill Allows Law Enforcement To Use Personal Data Without Consent

SUMMARY

Personal data can be processed without consent only after taking into consideration factors such as public interest

The proposed bill gives users the right to erase their personal data posted in the public domain

DPB will be sent to a joint committee for further discussion after it is tabled in the Parliament

The Personal Data Protection (PDP) Bill, which is likely to be tabled in Parliament this week, proposes allowing law enforcement agencies to process personal data of data principals (users) without consent for “reasonable purposes”.

The exemptions will be in cases of prevention and detection of any unlawful activity including fraud, whistle blowing,  mergers and acquisitions, network and information security, credit scoring, recovery of debt, processing of publicly available personal data and operation of search engines.

However, reiterating the importance of privacy, the draft, seen by Inc42, clearly states that except for any specific, clear and lawful purpose, no personal data shall be processed by any person.

Personal data can be processed without consent only after taking into consideration factors such as public interest. The draft says that personal data may be “processed” if this is necessary for the performance of “any function of the state authorized by the law” for any public service and for compliance with any order of a court or tribunal.

Among other changes, the proposed bill also gives users the right to delete any personal data posted in the public domain similar to the Right To Be Forgotten ruling in Europe and gives them the freedom to ask social media platforms such as Facebook and Twitter to delete any data they have published online.

The proposed bill will also require social media platforms to create a mechanism that will allow users to verify their accounts.

Data principals can also ask for restricting continued disclosure of data once the purpose for which it was collected has been served, or is no longer necessary. If the users withdraws consent, the data has to be removed. However, they will have to file an application with an adjudicating officer in case they wish to withdraw consent or want to limit the use of data, according to the draft.

The draft also says that every data fiduciary i.e. company or agency asking for the data and the data processor processing the data shall implement necessary security safeguards, including use of methods such as de-identification and encryption, steps necessary to protect the integrity of personal data; and steps necessary to prevent misuse, unauthorised access, modification, disclosure or destruction of personal data. It also says that every data fiduciary and data processor shall undertake a review of its security safeguards periodically.

The PDP Bill has got the union cabinet’s approval last week and will be sent to a joint committee for further discussion after it is tabled.

Note: We at Inc42 take our ethics very seriously. More information about it can be found here.

You have reached your limit of free stories
Become An Inc42 Plus Member

Become a Startup Insider in 2024 with Inc42 Plus. Join our exclusive community of 10,000+ founders, investors & operators and stay ahead in India’s startup & business economy.

2 YEAR PLAN
₹19999
₹7999
₹333/Month
Unlock 60% OFF
Cancel Anytime
1 YEAR PLAN
₹9999
₹4999
₹416/Month
Unlock 50% OFF
Cancel Anytime
Already A Member?
Discover Startups & Business Models

Unleash your potential by exploring unlimited articles, trackers, and playbooks. Identify the hottest startup deals, supercharge your innovation projects, and stay updated with expert curation.

Data Protection Bill Allows Law Enforcement To Use Personal Data Without Consent-Inc42 Media
How-To’s on Starting & Scaling Up

Empower yourself with comprehensive playbooks, expert analysis, and invaluable insights. Learn to validate ideas, acquire customers, secure funding, and navigate the journey to startup success.

Data Protection Bill Allows Law Enforcement To Use Personal Data Without Consent-Inc42 Media
Identify Trends & New Markets

Access 75+ in-depth reports on frontier industries. Gain exclusive market intelligence, understand market landscapes, and decode emerging trends to make informed decisions.

Data Protection Bill Allows Law Enforcement To Use Personal Data Without Consent-Inc42 Media
Track & Decode the Investment Landscape

Stay ahead with startup and funding trackers. Analyse investment strategies, profile successful investors, and keep track of upcoming funds, accelerators, and more.

Data Protection Bill Allows Law Enforcement To Use Personal Data Without Consent-Inc42 Media
Data Protection Bill Allows Law Enforcement To Use Personal Data Without Consent-Inc42 Media
You’re in Good company