In a significant development, the Union Cabinet has given its nod to the Digital Personal Data Protection Bill (DPDP) in India. The bill aims to safeguard individuals’ digital privacy while providing a mechanism for companies to voluntarily disclose data breaches and resolve disputes through alternate means.
The bill, which will be presented in the upcoming monsoon session of Parliament by the Ministry of Electronics and Information Technology (MEITY), emphasizes a voluntary disclosure mechanism akin to plea bargaining. Companies will have the opportunity to admit to data breaches and pay the necessary penalties, reducing the burden on the legal system.
The DPDP empowers the Data Protection Board (DPB) to impose fines of up to Rs 250 crore on organizations found to be in breach, with the possibility of increasing fines to a maximum of Rs 500 crore with cabinet approval. The DPB will consist mainly of independent industry experts, functioning as a digital office for adjudication on matters related to personal privacy and data.
Notably, the bill retains the definition of children as individuals under the age of 18, prioritizing their online safety. Once passed, data principals will have the right to request the deletion of data collected prior to the implementation of the data protection regime.
The introduction of alternate dispute resolution (ADR) provisions will enable parties to settle complaints with the assistance of a mediator, further streamlining the resolution process.
With the passage of this bill, individuals will also have the right to question private companies and governments about the data collected from them, its processing methods, and storage locations.
The approval of the Digital Personal Data Protection Bill reflects the government’s commitment to enhancing privacy rights and addressing data breaches. The comprehensive consultation process undertaken by the government has garnered positive responses from industry stakeholders.
This bill represents a significant stride toward a more secure and accountable digital ecosystem, protecting individuals’ personal data and ensuring transparency in data practices.
