In India, the primary legislation concerning data protection is the Personal Data Protection Bill (PDPB), which was introduced in 2019 and is expected to become law in the near future. Once enacted, the PDPB will regulate the processing of personal data by both government and private entities in India and will provide Indian citizens with certain privacy rights similar to those found in the CCPA and other data protection laws around the world.
Some of the key privacy rights that may be provided to Indian citizens under the PDPB include:
- Consent: Individuals will have the right to provide explicit consent before their personal data is collected, processed, or shared by organizations.
- Access and Correction: Individuals will have the right to access their personal data held by organizations and request corrections or updates to inaccurate or outdated information.
- Data Portability: Individuals may have the right to receive their personal data in a structured, commonly used, and machine-readable format, allowing them to transfer their data between service providers.
GDPR DATA PROTECTION RIGHTS
- Right to be Forgotten: Individuals may have the right to request the deletion or removal of their personal data under certain circumstances, similar to the right to be forgotten in the European Union’s General Data Protection Regulation (GDPR).
- Data Minimization: Organizations will be required to collect only the minimum amount of personal data necessary for the purposes for which it is being processed.
- Data Security: Organizations will be required to implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data.
It’s important to note that until the PDPB becomes law and is fully implemented, the specific privacy rights available to Indian citizens may not be fully defined. However, the PDPB is expected to bring India’s data protection framework more in line with international standards, providing individuals with greater control over their personal data and imposing obligations on organizations to handle data responsibly and transparently.