The government may give around six months to industry to align with the Digital Personal Data Protection Act, Minister of State for Electronics and IT Rajeev Chandrasekhar on Monday said. However, the actual transition time will be decided after consultation with stakeholders, he added. During a fireside chat session with students at Delhi University, Chandrasekhar said the government is ready with all rules and ready to notify the Data Protection Board soon. The minister said the migration to the new regime should not lead to any disruption in the businesses. "We may give a certain amount of time for platforms to migrate, to have consent managers, redesign their consent form, make sure data processing is aligned to the act...we will not give them 2 years. It will be some number, six months or something like that so that transition is orderly," Chandrasekhar said. He said there will be enough time given so that people become aware of their rights, and MSME should also get some tim
The provision was one of the most contentious issues during the public consultations on the bill
Stringent legal obligation to prevent breaches has companies reviewing their security practices
Union Minister of State for Electronics and Information Technology Rajeev Chandrasekhar on Thursday said the Digital Personal Data Protection Act (DPDP Act) passed by Parliament recently will make digital companies handle the data of Indian citizens under absolute legal obligation. Calling the law an important milestone in the cyber law framework, Chandrasekhar said there will be punitive consequences of high penalty and even blocking them from operating in India. "The Digital Personal Data Protection Act that was passed by Parliament a few days ago is a very important milestone in the global standard cyber law framework that Prime Minister Narendra Modi wanted to build for the India Techade' (a decade of technology) for a trillion dollar digital economy," the union minister told PTI. The DPDP Bill is aimed at giving Indian citizens a right to have his or her data protected and casts obligations on all companies, all platforms be it foreign or Indian, small or big, to ensure that th
As per the Act, the govt may come out with rules directing the platforms about expected line of action to comply with all the provisions
Countries such as New Zealand said that they are taking a 'keen interest' in the implementation of the Bill and also its approach to privacy regulation
Data Protection Board of India could play an essential role in bringing about regulatory agility and striking the right balance between regulation and innovation in a data-dependent digital economy
The Digital Personal Data Protection bill, passed by Parliament this week, has received President's assent, Union Minister Ashwini Vaishnaw said on Saturday. Digital Personal Data Protection (DPDP) law aims to protect the privacy of Indian citizens while proposing a penalty of up to Rs 250 crore on entities for misusing or failing to protect digital data of individuals. Companies handling user data will be required to safeguard the individual's information, and instances of personal data breach have to be reported to the Data Protection Board (DPB) and the user. "DPDP Bill becomes an Act. Received Hon'ble President's assent," Vaishnaw said in similar posts on X (formerly Twitter), and homegrown app Koo. On August 9, the Rajya Sabha approved the DPDP bill that introduces several compliance requirements for the collection and processing of personal data, has provisions to curb misuse of individuals' data by online platforms, and entails up to Rs 250 crore penalty for any data ...
The government is expecting to implement the Digital Personal Data Protection law within 10 months, Union IT Minister Ashwini Vaishnaw said on Wednesday. The Rajya Sabha on Wednesday passed the Digital Personal Data Protection Bill 2023 with a voice vote amid a walkout by opposition members over the Manipur issue. The Bill, which comes after six years of the Supreme Court declaring 'Right to Privacy' as a fundamental right, has provisions to curb the misuse of individuals' data by online platforms. "We have started work on implementation. This kind of legislation will require a 6-10 month kind of frame. We will take every step with proper checks and balances. It is a guesstimate. We might do it faster than that," Vaishnaw said. Elaborating on the principles, he said the data collected by the citizens should be used as per the law, only for the purpose for which it has been collected and the quantum of data should be limited to the requirement. Vaishnaw said citizens will have the
The consulting firms have gone into a temporary wait-and-watch mode on certain things in the Bill until a rulebook could clarify it for them
Email marketing leader Mailchimp has admitted it was hacked and at least 133 customers' data was exposed
The proposed legislation should also clarify that in the event of conflicts with sectoral rules and regulations
MeitY to come up with all rules of the bill before tabling the bill in the parliament: MoS IT
Das advised fintechs to pay close attention to governance, business conduct, data protection, customer centricity, regulatory compliance and risk mitigation frameworks
Provisions on non-personal data, criminal penalties, hardware certification scheme, and statutory data residency requirements among those axed
'Real process of openness' and listening to feedback in preparing legislation, he says
MeitY on Friday released a draft version of the much-awaited data protection law, in the fourth such effort since it was first proposed in July 2018
Governance through trusts will help balance the concerns over data sovereignty and its economic potential
Say some of the open-ended language may need refining
The new Bill, though better, gives govt too much discretion