Personal Data Protection Bill: IT Ministry may back storage curbs for critical, sensitive data

PTI New Delhi | Updated on July 23, 2019 Published on July 23, 2019

The proposal marks a departure from the original draft of the bill, which said that all personal data must be stored in India.

The IT Ministry is likely to propose that personal information which does not qualifies as either ‘critical’ or ‘sensitive’ should be allowed to be stored and processed anywhere, while data classified as ‘critical’ should be kept only in India under the draft Personal Data Protection Bill.

The proposal is significant as it marks a departure from the original draft of the Personal Data Protection Bill, which had recommended that copy of all personal data should be stored in the country.

The tweaking of this provision, if accepted, will spell a relief for companies.

The draft Data Protection Bill submitted by Justice BN Srikrishna Committee last year had also suggested that personal data that is of ‘critical’ nature should mandatorily be stored only in India, a stance that will be backed by the IT Ministry.

According to a government official, the IT Ministry is, however, of the view that not all personal data needs to be stored in India, and only ‘critical’ and ‘sensitive’ data should be kept here.

Also read: New data protection law to impact 50 existing Acts

While ‘critical’ personal data should be mandatorily stored only in India, ‘sensitive’ personal information should be stored and processed in India, but permitted to be transferred outside the country, the official pointed out.

The Ministry feels that there are adequate safeguards in the proposed Bill and even if a copy of all personal data is not stored in India, such information will anyway be governed by the stringent provisions of the data protection law, including penalty in event of a breach.

After the Justice Srikrishna Panel submitted its draft version of the Bill, the IT Ministry had sought public feedback on the provisions, and fine-tune the proposed document.

The draft legislation will now be placed before the Cabinet, after which it will be introduced in Parliament.

Change in stance

The official said the change in the clause pertaining to all kinds of personal data was primarily driven by industry feedback — both Indian and global companies — which argued that maintaining one copy of all information may become cumbersome, expensive and increase compliance burden on firms.

Also read: People, not the state, must own their data

“Most important change is that the original draft said that a copy of all personal data should be stored in India...ultimately, the Cabinet will take a call on the matter...IT Ministry is proposing that with regard to personal data only such data which is to be categorised as sensitive or critical needs to be stored in India,” the official told PTI.

Justice Srikrishna panel — which submitted its report on data protection as well as the draft Personal Data Protection Bill in July 2018 — had recommended that “every data fiduciary shall ensure the storage, on a server or data centre located in India, of at least one serving copy of personal data to which this Act applies”.

Defining critical data

The original draft had also stated that central government should notify categories of personal data as ‘critical’ that shall only be processed in a server or data centre located in India.

The Committee left it to the government to define critical personal data.

Also read: We’ve already lost the data privacy battle

The IT Ministry is learnt to be of the view that Data Protection Authority of India,(envisaged in the Bill) in consultation with the sector regulators and industry, should recommend to the government what kind of personal information qualifies as critical data.

The original version defines ‘Sensitive Personal Data’ as personal information related to passwords, financial data, health data, sex life, sexual orientation, biometric data, genetic data, transgender status, caste or tribe, religious or political affiliation; or other category of data specified by the authority.

Published on July 23, 2019

A letter from the Editor

Dear Readers,

The coronavirus crisis has changed the world completely in the last few months. All of us have been locked into our homes, economic activity has come to a near standstill. Everyone has been impacted.

Including your favourite business and financial newspaper. Our printing and distribution chains have been severely disrupted across the country, leaving readers without access to newspapers. Newspaper delivery agents have also been unable to service their customers because of multiple restrictions.

In these difficult times, we, at BusinessLine have been working continuously every day so that you are informed about all the developments – whether on the pandemic, on policy responses, or the impact on the world of business and finance. Our team has been working round the clock to keep track of developments so that you – the reader – gets accurate information and actionable insights so that you can protect your jobs, businesses, finances and investments.

We are trying our best to ensure the newspaper reaches your hands every day. We have also ensured that even if your paper is not delivered, you can access BusinessLine in the e-paper format – just as it appears in print. Our website and apps too, are updated every minute, so that you can access the information you want anywhere, anytime.

But all this comes at a heavy cost. As you are aware, the lockdowns have wiped out almost all our entire revenue stream. Sustaining our quality journalism has become extremely challenging. That we have managed so far is thanks to your support. I thank all our subscribers – print and digital – for your support.

I appeal to all or readers to help us navigate these challenging times and help sustain one of the truly independent and credible voices in the world of Indian journalism. Doing so is easy. You can help us enormously simply by subscribing to our digital or e-paper editions. We offer several affordable subscription plans for our website, which includes Portfolio, our investment advisory section that offers rich investment advice from our highly qualified, in-house Research Bureau, the only such team in the Indian newspaper industry.

A little help from you can make a huge difference to the cause of quality journalism!

Support Quality Journalism
This article is closed for comments.
Please Email the Editor
You have read 1 out of 3 free articles for this week. For full access, please subscribe and get unlimited access to all sections.