Consent must for using data such as biometrics, sexuality: Srikrishna panel

The proposed legislation contains a provision for the 'Right to be Forgotten', which is in line with the European data privacy laws

Recognising privacy as a fundamental right, the draft personal data protection Bill has mandated that explicit consent must be taken for processing sensitive personal data like biometrics, sexual orientation, and religious or political belief. Also, at least a copy of such personal data should be stored in India. The Justice B N Srikrishna-led panel submitted the Bill along with the recommendations on personal data protection to the government on Friday, after deliberating on the issue for one year. The panel was formed in July 2017 after the Supreme Court delivered a verdict that privacy was a fundamental right. 

The Bill