New Delhi, Jan 4 (IANS) Industry watchers on Saturday began to review the draft rules for the Digital Personal Data Protection (DPDP) Act, saying it is encouraging to finally witness progress on this front and continued input and guidance from the government will be essential to drive its effective implementation.
The Act was passed in Parliament in August 2023 and the government is seeking feedback on the draft rules through the MyGov portal till February 18, 2025.
“As the industry reviews the draft rules for the Digital Personal Data Protection Act, there are a few initial reflections to consider. These rules were highly anticipated, with the expectation that they would address implementation challenges, procedural gaps, and areas where the Act required further clarity,” said Shreya Suri, Partner, IndusLaw.
The DPDP Act makes it mandatory for data fiduciaries to ensure verifiable consent of a parent before processing any personal data of a child.
As per the draft rules, a data fiduciary will adopt appropriate technical and organisational measures to ensure that verifiable consent of the parent is obtained before the processing of any personal data of a child and shall observe due diligence, for checking that the individual identifying herself as the parent is an adult who is identifiable.
The move is aimed at ensuring the privacy of a child on various social media platforms and other websites.
According to Suri, it seems the approach might rely on self-declaration by users, allowing them to indicate whether they are minors or adults.
“This could potentially lead to broader processing of parental or guardian data, which raises interesting considerations regarding the scale and scope of such data collection,” argued Suri.
Another anticipated aspect is the introduction of thresholds for data breach reporting, where minor breaches could have had fewer compliance obligations.
“However, the current draft treats all breaches uniformly, requiring the same level of reporting and notification to the Data Protection Board and affected data principals, without granting any discretion whatsoever to data fiduciaries,” Suri emphasised.
It is likely that stakeholders will adopt practices aligned with the nature and scale of their data processing, but further guidance from the government would be crucial to ensure consistency and compliance across the industry, according to experts.
The draft rules also provide clarity regarding the setting up of the Data Protection Board, appointment and service conditions of the Chairperson and other members of the board.
The IT Ministry has said that the submissions made during the consultation will not be disclosed, and that only a summary of the feedback received will be published after the finalisation of the rules.
According to Mayuran Palanisamy, Partner, Deloitte India, the DPDP draft rules are quite detailed and give much needed direction to the businesses in India by expounding upon compliance to be carried out by them, such as obligations measures for significant data fiduciaries, registration and obligations of consent managers, the establishment and functioning of the Data Protection Board, including specifics of data breach intimation to Data Principles and the Board, process for the Principals to exercise their rights and timelines for Data Fiduciaries to respond to grievances.
“We foresee that businesses will face some complex challenges in managing consent as it forms the heart of the law. Maintaining consent artefacts and offering the option to withdraw consent for specific purposes could necessitate changes at the design and architecture level of applications and platforms,” said Palanisamy.
While the draft does attempt to cover some of these aspects, there is still significant ground to cover.
“I anticipate rigorous public consultations to gather comprehensive feedback, ensuring that the final version reflects the needs and perspectives of all stakeholders. Continued input and guidance from the government will be essential to drive effective implementation,” Suri noted.
–IANS
na/
Disclaimer
The information contained in this website is for general information purposes only. The information is provided by TodayIndia.news and while we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.
In no event will we be liable for any loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of this website.
Through this website you are able to link to other websites which are not under the control of TodayIndia.news We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.
Every effort is made to keep the website up and running smoothly. However, TodayIndia.news takes no responsibility for, and will not be liable for, the website being temporarily unavailable due to technical issues beyond our control.
For any legal details or query please visit original source link given with news or click on Go to Source.
Our translation service aims to offer the most accurate translation possible and we rarely experience any issues with news post. However, as the translation is carried out by third part tool there is a possibility for error to cause the occasional inaccuracy. We therefore require you to accept this disclaimer before confirming any translation news with us.
If you are not willing to accept this disclaimer then we recommend reading news post in its original language.
