Skip to main content

Data privacy and protection - India is moving in the right direction: PwC-ASSOCHAM report

While India has taken constructive steps in moving closer to a state of data protection regime, it has to address data privacy and protection concerns promptly by formulating a law to benefit from the rise and spread of the data economy. Due to lack of comprehensive privacy regulation, Indian businesses are still beginners in data governance. On the other hand, developed economies where mature data privacy and protection laws exist are now undergoing revisions to align their regulations to the challenges and threats of the 21st century, highlights the whitepaper ‘Privacy in the data economy’ launched today by PwC India and ASSOCHAM.
Speaking on the occasion, Mr. Siddharth Vishwanath, Leader – Cyber Advisory at PwC India, said, “The spread of digital ecosystem in India where e-wallets, ride-sharing services, ecommerce, online entertainment services and social media are thriving is the direct result of digital disruption. But the absence of data privacy and protection law could lead consumers exposed to risks of their data being misused by organisations and data breaches on account of sub-optimal investments in security.”
The advent of digital imperative and internet penetration has triggered the growth of user generated data, which businesses -- with the help of technologies like the Internet of Things (IoT) and artificial intelligence -- are capturing, storing and analyzing. Mature economies are already on the path to provide consumers control on their data and prevent companies from misuse of the data. It is of paramount importance for jurisdictions with weak or no privacy regulations to address these concerns.
The whitepaper talks on why it is paramount to have a data privacy and protection law. It also highlights the growing recognition across the globe on need for privacy regulation. The paper finds India at a nascent stage in the overall maturity curve of the data privacy and protection state. But the report believes that India is moving in the right direction and is on the cusp of coming at par with the global standards. Even regulators of various data-sensitive industries such as telecom, healthcare and banking are becoming increasingly sensitive to the issue and have released guidelines, recommendations and papers to govern the use of data by organisations in these industries.
The key highlight of the paper is calling out the nuances that need to be addressed appropriately in order to establish a robust, transparent and enforceable regulation e.g. borderless internet, localization of data etc.
·       Borderless Internet: A single act of processing of personal data could very easily occur across multiple jurisdictions. To address this, not only should the regulation apply to entities (both public and private) within India but also entities outside India that process personal data of Indian citizens and residents.
·       Cross-border transfer of data: The regulation should clearly restrict transfers only to countries that offer an adequate level of protection and propose additional measures that need to be ensured for data transfers that do not meet such standards.
·       Accountability of data: Not considering this aspect in the data privacy and protection law may lead to inability in assigning absolute accountability to parties involved in managing and processing data. The regulation should go beyond the entity collecting the data directly from the end consumer (data controller). Both the data processor and data controller should be equally accountable for safeguarding data.
·       State interest vs individual’s privacy: While an individual’s privacy rights need to be protected, there are certain legitimate state interests for processing personal data, which may conflict with an individual’s privacy rights. The proposed regulations need to walk a tight line between right to privacy and national security considerations in order to strike the right balance and avoid excessive interference in citizens’ personal life without justification.
·       Localisation of data: The regulation should take a call on data localisation after considering a cost-benefit analysis between the enforcement benefits derived from data localisation and the costs involved pursuant to such requirements.
·       Impact on micro, small and medium enterprises (MSMEs): Stringent regulations may deter MSMEs due to the high costs and technology investments necessary for compliance. The regulation should take a risk-based approach and provide certain relaxations and exceptions for MSMEs under specific circumstances.
·       Penalties and compensation: The penalties should be commensurate with the size and nature of the business. Further, there should be a higher level of penalty for breaches of privacy that organisations willfully make or that result negligent security practices. There should be clarity around the quantum and nature of the same to the extent feasible.
The paper finally concludes that timely planning/action will help organisations continue their business as usual and enhance their business reputation.


Popular posts from this blog

Cloud Computing powering India’s priority of ‘Digital-first country’

By: Sunil Mahale, India MD and VP, Nutanix
Digital transformation has been recognized as being vital to the growth of our nation. This transformation has enjoyed the unanimous approval and contribution from all stake holders including enterprises, MSMEs, government bodies and citizens. But this level of adoption in a country with a population of over a billion people would need a robust technology base that is capable to collecting and distributing vital data seamlessly.
Digital India envisions creating high speed digital highways, that will impact commerce and create a digital footprint for every individual. Technologies based on mobility, analytics, Internet of things and most importantly, cloud technologies are the building blocks for the digital India missionThere is a growing need to manage huge volumes of data, and making them readily available to public through digital cloud services. Cloud has a pivotal role in enabling this change.
While Data centers have become crucial to th…

RevStart launches its RevItUp Incubation Programme

Underlining its vision of creating a nurturing ecosystem for start-ups to grow in, RevStart, a co-working and incubation centre, has announced the launch of its RevItUp Incubation Programme. The 12-week long programme will be held at RevStart Incubation Centre in Noida from July 1, 2018 onwards. As part of the programme, RevStart will select five high potential start-ups from the ed-tech sector, AI, Consumer Internet, Sustainability, as well as for-profit social impact companies to assist them with developing their business, along with connecting them to global mentors across industries and sectors. In addition, start-ups selected for the programme will receive INR 5 lakh to Rs. 25 lakhs worth of cash and benefits, while RevStart will get an equity stake in the ventures.
The RevItUp Incubation Programme has been created to enhance the founding team’s industry, product, and company building knowledge and capabilities through a world-class curriculum. The programme will focus on tailor…

Insurtech startup Kruzr raises $1.3 Million from Saama Capital and Better Capital

InsurTech startup Kruzr has raised 1.3 Million USD (Rs. 9.5 Cr) for its seed round led by Saama Capital with participation from Better Capital. Kruzr is a preventive motor insurance technology which helps insurance companies personalize policy premiums & improve their risk model by delivering an engaging preventative driving assistant to their customers. Kruzr is founded by Pallav Singh, Ayan, and Jasmeet Singh Sethi.

Kruzr blends the power of voice technology and artificial intelligence in its personal driving assistant that helps drivers minimize mobile distractions, drowsy driving, speeding and external risks like weather and accident-prone zones. In pilots with insurers, Kruzr managed to cut down distracted driving by 80%. Kruzr is working with motor insurance companies in Europe, UK and India to bring its technology to their customers to prevent accidents & improve claims.

“Road accidents cause over 1.3 million deaths globally every year, and motor insurance companies los…