Government Proposes Digital Data Bill to Enhance Cybersecurity and User Control
New Delhi: India has proposed a new set of regulations aimed at enhancing data privacy, bolstering cybersecurity, and imposing strict penalties on organizations mishandling personal data. The proposed Digital Personal Data Protection Bill (DPDPB) seeks to regulate the collection, processing, and storage of personal data across sectors, aligning India’s framework with global standards like the EU’s General Data Protection Regulation (GDPR).
One of the most significant provisions of the proposed rules is the requirement for explicit user consent before collecting any personal data. Users will have the right to access, rectify, or erase their data, while companies will be obligated to ensure data transparency and accountability. This is expected to give individuals more control over their digital information.
To address cybersecurity concerns, the rules mandate stringent data protection measures. Businesses will be required to adopt robust security practices to prevent data breaches and will be held accountable for any lapses. In the event of a data breach, companies must notify users and the Data Protection Authority (DPA) within a specified timeframe. This provision aims to mitigate the impact of breaches and enhance transparency.
The proposed rules also introduce data localization requirements, which will mandate that sensitive data be stored within Indian borders, sparking concerns about potential disruptions to international business operations. Furthermore, hefty fines of up to ₹250 crore (approximately $30 million) can be imposed for non-compliance, which is expected to create a culture of accountability among organizations.
While the rules are designed to protect users’ privacy, they have generated concerns regarding the regulatory burden on businesses, particularly startups and small enterprises. The Indian government’s push for stringent data rules signals a major step toward stronger data governance in the digital age.
