Data Protection Bill: Explained: JCP prescription for data Bill

News: Joint Committee of Parliament (JCP) has tabled its report on the Data Protection Bill in both houses.

What are the recommendations by JCP on Data Protection Bill?

Sensitive data: JCP proposed all contracts enabling businesses to take sensitive personal data out of India’s borders will now need the approval of the central government in addition to the data protection regulator (DPA).

Transition period: JCP suggested giving 24 months’ time to all data aggregators to comply with the rules under the new Bill. All data fiduciaries that deal exclusively in children’s data have to register themselves with the DPA and for this 9 months period has been suggested.

Penalty: What penalties and punishments have been recommended in the report?

Timely Alert: In case of any data breach, the data aggregator or fiduciary must notify the DPA within 72 hours of becoming aware of it. DPA will then act accordingly.

Unified system: JCP stressed a need to set up new processes to unify all data present across spectrums and organizations such as public and private sector companies, research organizations and academic institutions.

Exemption: Bill gives the central government the power to exempt its agencies from the ambit of the data protection regulation. It gives the central government the power to exempt its agencies from the ambit of the data protection regulation.

What is the procedure for changing the bill into law?

Source: This post is based on the following articles:

“There’s an expansion of state power in the domain of privacy” published in the Indian Express on 18th December 2021.

“Explained: JCP prescription for data Bill” published in the Indian Express on 18th December 2021.