Digital Personal Data Protection Bill, 2022

Why in News?

• Recently, The Union Government has released a revised personal data protection bill, now called the Digital Personal Data Protection Bill, 2022

Highlights

• The Bill has been introduced after 3 months of the withdrawal of the Personal Data Protection Bill, 2019.
• Firstly, usage of personal data by organisations must be done in a manner that is lawful, fair to the individuals concerned and transparent to individuals.
• Secondly, personal data must only be used for the purposes for which it was collected.
• The third principle talks of data minimisation.
• The fourth principle puts an emphasis on data accuracy when it comes to collection.
• The fifth principle talks of how personal data that is collected cannot be “stored perpetually by default” and storage should be limited to a fixed duration.
• The sixth principle says that there should be reasonable safeguards to ensure there is “no unauthorized collection or processing of personal data”.
• Seventh principle states that “the person who decides the purpose and means of the processing of personal data should be accountable for such processing”.
• Data Principal refers to the individual whose data is being collected.
• In the case of children (<18 years), their parents/lawful guardians will be considered their “Data Principals”.
• Data Fiduciary is the entity (individual, company, firm, state etc), which decides the “purpose and means of the processing of an individual’s personal data”.
• Personal Data is “any data by which an individual can be identified”.
• Processing means “the entire cycle of operations that can be carried out in respect of personal data”.