Justice Srikrishna panel on Friday submitted the draft report in protection and storage of local and personal data.
Justice Srikrishna panel on Friday submitted the draft report in protection and storage of local and personal data. The 213-page draft bill advocated the idea of ‘explicit’ consent for sensitive data. The committee has listed 13 types of information that could be termed sensitive personal data. “Sensitive personal data may be processed on the basis of explicit consent,” the panel headed by Justice BN Srikrishna said in the report titled ‘The Personal Data Protection Bill, 2018’. Privacy is a burning issue now and all efforts must be made in this direction to protect data, Justice Srikrishna said while handing the report to IT Minister Ravi Shankar Prasad.
Justice Srikrishna committee report also emphasises the law’s jurisdiction on companies that have a “significant economic presence in India” or those who carry out business in the country. The report adds that all the personal data processed by the Indian companies even if the processing is carried out abroad and the personal data processed by foreign companies in India must be protected. If foreign websites access India data in a way that is “neither large-scale nor capable of causing significant harm”, the Indian law should not apply, the report says.
“It may be argued that seeking such consent may be unimplementable. We do not see why this must be the case — if an individual can be targeted precisely for the purpose of showing her an advertisement or a particular communication, surely, she can be targeted for seeking consent before such action. The final call on how the consent should be obtained should be left to the determination of the DPA (data protection authority),” the committee said.
The report has listed 13 pieces of information that could be considered as Sensitive Personal Data:
- financial data
- health data
- official identifier
- sex life
- sexual orientation
- biometric data
- genetic data
- transgender status
- intersex status
- caste or tribe
- religious or political belief or affiliation
- any other category of data specified by the Authority under section 22