It, however, provides for exemptions for "reasonable purposes" such as "prevention and detection of any unlawful activity including fraud, whistle blowing, merger and acquisitions, network and information security, credit scoring, recovery of debt, processing of publicly available personal data, and the operation of search engines".
The proposed legislation provides for stringent ground rules for processing of personal and sensitive information of children, while mandating the processing of 'critical' personal data only in India.
"Open society, democratic world need to acknowledge that fair data regime thrives, develops only in democratic ecosystem, any kind of data imperialism is plainly unacceptable to us," Prasad said.