 "Your Alexa, Google Home may stop speaking if parliament passes new data law")
Asking a Google Home or Alexa device to play your favourite song, unlocking a mobile phone with your fingerprint or face scan, and using iris scan to access your bank account may all just become difficult if the draft Data Protection Bill gets Parliament nod in its current form. Clause 92 of the draft Bill seeks to ban the processing of certain forms of biometric data, unless permitted by law.
This, according to industry experts, will have a far-reaching impact on companies in almost every sector — from the digital commerce to banking, health care and even automobile industry. Companies, which are using fingerprint scanners, voice command tools, iris and face scanners, among other biometric data, will have to deal with the impact after the Bill is signed into law.
According to industry experts, companies like Google and Amazon, which use biometric data, may be affected. To begin with, both firms have voice assistants and various other products and these will be directly impacted by Clause 92. In the worst-case scenario, it will become next to impossible for these tech firms to run any service that requires user biometrics.
“Google uses voice for running things like Google Translate and Google Home. Amazon has Alexa voice assistant. If the draft Bill gets passed, their operations would be massively hit. Amazon, which is trying to create an online buying service based on user voice commands, will be left stranded,” said a senior vice president of one of these firms.
Experts believe that Clause 92 of the draft Bill makes it clear that no data fiduciary (firm or an individual) shall process such biometric data as may be notified by the central government unless the processing is permitted by law. At the moment what sort of biometric data will be allowed and what won’t, and which firm can collect what kind of data are not clear.
“This is one of the several ambiguities in the current draft. It bars the processing of certain forms of biometric data. However, the provision lacks clarity on which kind of biometric data cannot be processed and what can be processed. It could lead to regulatory confusion and complicate things for companies that are involved in dealing with biometric data or are manufacturing devices that are dependent on processing of biometrics like phones, voice recognition-operated devices, IoT technology firms, fintech, and banking industry,” said Salman Waris, managing partner at TechLegis Advocates & Solicitors, a law firm.
Mobile phone makers may be one of the worst-hit -- they will have to start storing all biometric data locally and this will be an added infrastructure cost.
“The storing of biometric data locally will mean that all phone companies which store biometrics on their servers to authenticate user access will have to store and process this data in India”, said Sachin Taparia, founder & chairman, LocalCircles. He further said that since biometric is classified as sensitive data, local storage and processing of this information does make sense.
Card companies to be affected
Consent mechanism is at the heart of data sharing and the idea is to make the customer the owner of his/her data. Under the account aggregator (AA) framework, the customer should be given the right to approve the sharing of data between two banks.
This is to make the customer powerful and also to educate him/her about how the data is being used. The Financial Stability and Development Council (FSDC) has already approved the AA framework.
“Banks are better placed when it comes to data protection. There will be an impact on banks but they are also prepared for it, especially those which have foreign operations. We are already spending money on this but now we have to look at consent mechanism and I think we will be given a two-year window to build it. We have to see the details of the law. I think this law will impact the card companies more because they are not storing data locally,” said a banking expert.
This, according to industry experts, will have a far-reaching impact on companies in almost every sector — from the digital commerce to banking, health care and even automobile industry. Companies, which are using fingerprint scanners, voice command tools, iris and face scanners, among other biometric data, will have to deal with the impact after the Bill is signed into law.
According to industry experts, companies like Google and Amazon, which use biometric data, may be affected. To begin with, both firms have voice assistants and various other products and these will be directly impacted by Clause 92. In the worst-case scenario, it will become next to impossible for these tech firms to run any service that requires user biometrics.
“Google uses voice for running things like Google Translate and Google Home. Amazon has Alexa voice assistant. If the draft Bill gets passed, their operations would be massively hit. Amazon, which is trying to create an online buying service based on user voice commands, will be left stranded,” said a senior vice president of one of these firms.
Experts believe that Clause 92 of the draft Bill makes it clear that no data fiduciary (firm or an individual) shall process such biometric data as may be notified by the central government unless the processing is permitted by law. At the moment what sort of biometric data will be allowed and what won’t, and which firm can collect what kind of data are not clear.
“This is one of the several ambiguities in the current draft. It bars the processing of certain forms of biometric data. However, the provision lacks clarity on which kind of biometric data cannot be processed and what can be processed. It could lead to regulatory confusion and complicate things for companies that are involved in dealing with biometric data or are manufacturing devices that are dependent on processing of biometrics like phones, voice recognition-operated devices, IoT technology firms, fintech, and banking industry,” said Salman Waris, managing partner at TechLegis Advocates & Solicitors, a law firm.
Mobile phone makers may be one of the worst-hit -- they will have to start storing all biometric data locally and this will be an added infrastructure cost.
“The storing of biometric data locally will mean that all phone companies which store biometrics on their servers to authenticate user access will have to store and process this data in India”, said Sachin Taparia, founder & chairman, LocalCircles. He further said that since biometric is classified as sensitive data, local storage and processing of this information does make sense.
Card companies to be affected
Consent mechanism is at the heart of data sharing and the idea is to make the customer the owner of his/her data. Under the account aggregator (AA) framework, the customer should be given the right to approve the sharing of data between two banks.
This is to make the customer powerful and also to educate him/her about how the data is being used. The Financial Stability and Development Council (FSDC) has already approved the AA framework.
“Banks are better placed when it comes to data protection. There will be an impact on banks but they are also prepared for it, especially those which have foreign operations. We are already spending money on this but now we have to look at consent mechanism and I think we will be given a two-year window to build it. We have to see the details of the law. I think this law will impact the card companies more because they are not storing data locally,” said a banking expert.
Clause 92: What may be hit
- Makers of voice-based assistants, such as Google and Amazon
- Mobile phone manufacturers
- Fintech firms
- Hospitals, health care companies and institutions
- Smart TV manufacturers
- Voice-based household equipment manufacturers
One subscription. Two world-class reads.
Already subscribed? Log in
Subscribe to read the full story →*Subscribe to Business Standard digital and get complimentary access to The New York Times
Smart Quarterly
₹900
3 Months
₹300/Month
SAVE 25%
Smart Essential
₹2,700
1 Year
₹225/Month
SAVE 46%
*Complimentary New York Times access for the 2nd year will be given after 12 months
Super Saver
₹3,900
2 Years
₹162/Month
Subscribe
Renews automatically, cancel anytime
Here’s what’s included in our digital subscription plans
Exclusive premium stories online
Over 30 premium stories daily, handpicked by our editors
Complimentary Access to The New York Times
News, Games, Cooking, Audio, Wirecutter & The Athletic
Business Standard Epaper
Digital replica of our daily newspaper — with options to read, save, and share
Curated Newsletters
Insights on markets, finance, politics, tech, and more delivered to your inbox
Market Analysis & Investment Insights
In-depth market analysis & insights with access to The Smart Investor
Archives
Repository of articles and publications dating back to 1997
Ad-free Reading
Uninterrupted reading experience with no advertisements
Seamless Access Across All Devices
Access Business Standard across devices — mobile, tablet, or PC, via web or app
SAVE 25%