Digital Personal Data Protection Bill 2023: What Experts Say

What is the most precious in this world as of current time? It is the information of one’s bank account. This private information in the digital era is referred to as ‘Data’. The digital age has certain programming in the gadgets that save the information which we give while logging procedures to any apps and digital platforms, and when that information is used in a corrupt way, it is called a ‘Data Breach’. 

What Is Digital Personal Data Protection (DPDP) Bill 2023? 

In combating this enemy of the digital world, the Narendra Modi-led Central government tabled the Digital Personal Data Protection Bill recently in the Lok Sabha. It was tabled by Union Communications, Electronics, and Information Technology Minister Ashwini Vaishnaw. The bill proposes legislation to form rights and duties for the citizen and also sketch out obligations for the business while collecting personal data. 

DPDP is based on six principles; collection and utilisation of personal data of citizens of India must be protected, data collection exercises must be for a legal purpose and the data should be safely stored till the purpose is served. 

The bill also holds on to the issue of data minimisation so that only required data will be recorded from the users. The most significant principle the bill is talking about is regarding reporting the data breach. 

What DPDP Will Propose? 

Though the opposition is claiming the bill is a violation of the privacy of citizens, they are asking for more layers of scrutiny of the bill. The tabled bill of DPDP will allow the transfer and storage of data in some countries and will also have legislation of penalty on any kind of violation of that data. DPDP rolling in the legislation that asks for consent prior to collecting private data and provides penalties of Rs 500 on businesses and individuals if they fail to protect the data. 

What Is The Need?

There are several matters that took place publicly recently where data theft came up as a serious issue; AIIMS ransomware was the major one in which nearly 40 million records were touched. Data theft is emerging as a severe issue across the globe, According to Sweden-based data security VPN service provider, Surfshark, India ranked fifth in the world in the first quarter of this year, with 12 lakh cases of data breach. 

How Do Experts React?

Data breaches and their protection influence every sector across the country. There are many industry leaders who reacted to the tabled DPDP bill in Lok Sabha. 

Udit Mehrotra, MD and CEO, Spectra "As the Digital Private Data Protection Bill takes centre stage in parliament today, it serves as a crucial reminder that just as user privacy is paramount in the digital age, network security stands as an equally imperative responsibility for companies. 

Safeguarding not only personal information but also the very infrastructure that holds it, ensures a landscape where trust, innovation, and progress can thrive unhindered."

Sujit Patel, MD and CEO, SCS Tech, said,

"It is necessary to appreciate and comprehend the applicability of the Digital Personal Data Protection Bill, which creates a new framework for personal data security. The bill will bring India one step closer to establishing the law on data privacy and protection. It is being done to serve the greater aim of a Digital Economy. The bill is expected to give people more rights, visibility, awareness, autonomy in decision-making, and control over their data, while also requiring businesses to respect those rights and offer suitable remedies."

Dhiraj Gupta, Co-Founder and CTO, mFilterIt, said, “In light of the new movement towards data privacy, businesses must be aware of their responsibilities towards their customer's data protection. Data protection must be balanced with the right equation of fraud detection associated with data. Businesses must be well-equipped to combat the threats of data breaches and ensure their customer's data is not at risk.”

Dr. Sanjay Katkar, Jt. Managing Director of Quick Heal Technologies expressed his thoughts on the recent development, stating, "We applaud the government's dedication to data privacy and protection as demonstrated by the consensus on the Digital Privacy Data Protection Bill (DPDPB) in parliament. This significant step showcases our government's unwavering commitment to safeguarding personally identifiable information (PII) in this digital age. It emphasizes responsible data collection, secure backup, and lawful disposal practices for businesses. With the bill now passed, it is vital to ensure its effective implementation with proper compliance and regulations. This includes strong measures to enforce penalties for non-compliance. Businesses must take this responsibility seriously and proactively adhere to the bill's requirements.”

Sandeep Gupta, Managing Director, Protiviti Member Firm, added, "“The introduction of the Digital Personal Data Protection Bill (DPDP Bill) 2023 marks a significant turning point in safeguarding privacy, granting individuals extensive control over their personal data. Backed by a strong Data Protection Authority and strict provisions, the bill ensures rights such as informed consent, rectification, erasure, and data transfer. This legislation represents a major milestone in protecting digital privacy and promoting a secure data ecosystem in India."

The effectiveness of any act can be known after its implementation on the ground, however, the DPDP is not only providing legislation to the data breach but also reminding the users about their rights and duties while sharing their data.