Digital Reform in India: President Drupadi Murmu Approves New Cybersecurity Law

Carding

Professional
Messages
2,870
Reaction score
2,511
Points
113
Citizens personal data is now protected... or under threat?

Indian President Drupadi Murmu has approved a Digital Privacy Law. This happened on Friday, after the law was unanimously passed by both houses of Parliament last week.

The terms of the law apply to data collected both online and offline. They require that information be processed only with the user's consent and only for good reasons. Companies should only store information that is necessary for the stated goal, and delete it when it is achieved.

"The law provides for the processing of digital personal data in a way that recognizes both the rights of individuals to personal protection and the need for processing for legitimate purposes," the government said.

Requests for direct user consent must be accompanied by a notification of the reasons for the collection. "Personal data" means any information that allows identifying a person.

If you are talking about children under the age of 18 and people with disabilities, you will need permission from their parents or guardians.

The law establishes the Information Protection Council, which will consider citizens ' complaints about leaks. It will be able to investigate incidents and impose fines of up to Rs 250 crore (RR 12,200,000).

"In the event of a leak, a citizen simply goes to the Council's website, indicates the details of the incident, and the Council initiates an investigation, imposing sanctions on the guilty platforms," said Rajiv Chandrasekhar, Minister of Information Technology.

The law became possible after the publication of its draft by the Ministry of Electronics and Information Technologies in November 2022. The document was developed over five years ago, and the first version was released in 2018.

However, many experts fear that the powers under the new rules will be abused by government agencies. This may make it easier for them to collect and store redundant information in the interests of "national security."

"In its current form, the law does not sufficiently protect the right to privacy and should not be adopted," human rights activists criticized.

Подробнее: https://www.securitylab.ru/news/540924.php
 
Top