{"id":297289,"date":"2023-07-20T11:00:24","date_gmt":"2023-07-20T05:30:24","guid":{"rendered":"https:\/\/www.scconline.com\/blog\/?p=297289"},"modified":"2023-07-27T14:50:19","modified_gmt":"2023-07-27T09:20:19","slug":"preparing-for-a-comprehensive-framework-for-data-protection-in-india","status":"publish","type":"post","link":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/","title":{"rendered":"Preparing for a Comprehensive Framework for Data Protection in India"},"content":{"rendered":"
\n

D<\/span>ata Protection in India is set to undergo a transformative change as the Parliament\u2019s Monsoon Session commenced on 20-7-2023. The Digital Personal Data Protection Bill, 20221<\/sup><\/a> (2022 Bill) which had been released for public comments on 18-11-2022, is reported to undergo certain modifications (2023 Draft) prior to being introduced. While the 2023 Draft has not yet been released, it has been enlisted in the expected Government Business2<\/sup><\/a> and is expected to be tabled in the Parliament.<\/p>\n

Revisiting the 2022 Bill<\/h4>\n

The 2022 Bill is proposed to apply to the processing of digital personal data of individuals to whom such data relates (data principals) within India collected online and offline (if digitised) and extends to processing outside India in connection with profiling of or offering of goods or services to data principals in India3<\/sup><\/a>. Therefore, entities outside India which offer goods or services to data principals (targeting) or profile individuals in India, are likely to be subject to the Bill\u2019s provisions.<\/p>\n

The 2022 Bill permitted processing of personal data based on consent4<\/sup><\/a> or deemed consent5<\/sup><\/a> for a lawful purpose only, in accordance with its provisions. Entities which determined purpose and means of processing (i.e., \u201cdata fiduciaries\u201d) would be primarily responsible for data processing6<\/sup><\/a>, while limited obligations would apply to entities which process on behalf of such data fiduciaries (data processors). Some of these key obligations include:<\/p>\n

(a<\/i>) providing appropriate notice7<\/sup><\/a> to data principals containing purpose and categories of personal data prior to collection of personal data;<\/p>\n

(b<\/i>) obtaining freely given, specific and informed consent8<\/sup><\/a> for specified purposes;<\/p>\n

(c<\/i>) ensuring accuracy and completeness of personal data, especially if decisions may be made based on the same or if such data is proposed to be shared with third-parties;<\/p>\n

(d<\/i>) implementing technical and organisational measures9<\/sup><\/a> and protecting personal data from breach by taking reasonable security safeguards10<\/sup><\/a>;<\/p>\n

(e<\/i>) ceasing to retain information after purpose of collection is fulfilled unless required to be retained for legal or business purposes;<\/p>\n

(f<\/i>) publish details of grievance officer and implement grievance redressal mechanism for addressing concerns and grievances of data principals;<\/p>\n

(g<\/i>) engage data processors or disclose personal data to third parties only under a valid contract with the data fiduciary;<\/p>\n

(h<\/i>) comply with additional obligations applicable to processing of children\u2019s personal data11<\/sup><\/a> and obligations applicable to significant data fiduciaries12<\/sup><\/a>; and<\/p>\n

(i<\/i>) comply with restrictions applicable to cross-border transfer of personal data13<\/sup><\/a>.<\/p>\n

Changes proposed to the 2022 Bill<\/h4>\n

Pursuant to public consultation, certain changes have been proposed to the 2022 Draft. While the 2023 Draft itself has not been made publicly available, some of the key changes which have been reported include:<\/p>\n

(a<\/i>) Cross-border transfer of personal data<\/i>.\u2014 Under the 2022 Bill, data fiduciaries were restricted to transfer personal data of data principals, except to such territories or countries which have been notified by the Central Government14<\/sup><\/a>. In stark contrast, the 2023 Draft is reported15<\/sup><\/a> to have permitted cross-border transfer of personal data by data fiduciaries to all countries or territories, except those which have been notified by the Central Government.<\/p>\n

This change is significant as it facilitates the free flow of personal data across borders, further supporting digital trade in goods and services by adopting a \u201crestricted\u201d list, instead of a permitted one. While the countries to which transfers are restricted are yet to be seen, it may be anticipated that this provision may enable the Government to recognise certain jurisdictions, for example where free-trade agreements which provide for free flow of data are concluded, such as proposed UK-India agreement.<\/p>\n

(b<\/i>) Processing of children\u2019s personal data<\/i>.\u2014 The 2022 Bill contemplates additional restrictions or obligations for processing of personal data of children [i.e. individuals below 18 (eighteen) years of age] such as obtaining verifiable parental consent, restriction on undertaking processing likely to cause harm, restriction on undertaking tracking, behavioural monitoring or targeted advertising. On the other hand, the 2023 Draft reportedly16<\/sup><\/a> proposes that children [i.e, individuals below 18 (eighteen) years or a lower age which may be prescribed] may provide personal data, and the requirement to obtain parental consent may be exempt for certain platforms which have been determined \u201cverifiably safe\u201d may not be subject to that obligation.<\/p>\n

While it is reported that such \u201cverifiably safe\u201d platforms may be notified by the Ministry of Electronics and Information Technology or the Ministry of Women and Child Development the criteria for evaluation and notification of such platforms would need further clarity. This may bring comfort to entities in healthcare, edtech and other sectors which are more likely to process children\u2019s data.<\/p>\n

(c<\/i>) Notice and grounds for processing<\/i>.\u2014 While the 2022 Bill required certain notice requirements17<\/sup><\/a> i.e. to provide description of personal data and purposes for processing, the 2023 Draft reportedly18<\/sup><\/a> requires disclosure of processing operations, storage locations and possible implications or harm on data principals to be disclosed. Further, it is also speculated that legitimate business interests may be considered as ground for processing.<\/p>\n

While the inclusion of legitimate business interests as ground for processing is a welcome step, it must be supplemented with appropriate notices to data principals of such collection and processing. Separately, it may have to be assessed on a case-by-case basis if disclosure of extensive information about processing operations, storage locations and other information may lead to consent fatigue.<\/p>\n

(d<\/i>) Exemptions to startups<\/i>.\u2014 While the 2022 Bill enables the Government to exempt19<\/sup><\/a> certain data fiduciaries from certain obligations relating to notice, accuracy and completeness of personal data, storage limitation, additional obligations of processing children\u2019s personal data and additional obligations of data fiduciaries, it is reported20<\/sup><\/a> that the 2023 Draft specifically includes reference to \u201cstartups\u201d which may be exempted from these requirements. This is a welcome move to promote startups, especially those in IT and disruptive technologies sectors, where extensive processing of personal data may be undertaken.<\/p>\n

(e<\/i>) Appeal mechanism.\u2014<\/i> The 2022 Bill provides that appeals against orders of the Data Protection Board (Board) may be made to High Courts21<\/sup><\/a>. It is reported22<\/sup><\/a> that this may be modified to enable an appeal being preferred to the Telecom Disputes Settlement and Appellate Tribunal (TDSAT) or to an appellate body that may be constituted for this purpose. The creation of a new body or referring of appeals to TDSAT may be a positive development owing to a specialised tribunal for resolution along with speedier redressals.<\/p>\n

(f<\/i>) Penalties<\/i>.\u2014 While the 2022 Bill proposed that determination of non-compliance may invite penalties which may be imposed by the Board, the maximum penalty had been capped23<\/sup><\/a> to Rs 500 crores in each instance. It is reported24<\/sup><\/a> that this cap has been removed under the 2023 Draft. It is unclear whether this may lead to an implied cap of Rs 250 crores (in view of the penalties specified25<\/sup><\/a>) or if it may lead to penalties more than the same, should multiple offences be constituted in a single instance.<\/p>\n

Composition and functioning of the Data Protection Board<\/h4>\n

It has also been reported26<\/sup><\/a> that certain changes may be proposed to further elaborate the composition and functioning of the Board and the Government on rulemaking, adjudication of disputes and other provisions. Further, the \u201cdigital by design\u201d nature of the Board may have been dropped. While better delineation of powers of the Board vis-\u00e0-vis the Government, especially regarding rulemaking or code of conduct is a positive step in furthering regulatory clarity, the digital nature of the Board may be relevant and the intent behind the reported deletion may have to be examined further.<\/p>\n

Transitory provisions<\/h4>\n

It is also reported27<\/sup><\/a> that where consent has been provided prior to the commencement of the Bill, data fiduciaries must provide information to data principals on the purpose of collection and processing activity undertaken in accordance with the provisions of the Bill. While the finer aspects would be clarified upon examination of the clause, on a primary review, it may be practically difficult for entities to comply with the provisions, especially where processing activity is no longer continuing or where personal data is no longer in the possession of the data fiduciary, such as in case of historical data sets. Further, there is an absence of reportage on adequate transitory periods being provided for implementation of specific provisions.<\/p>\n

While much of the proposed changes are aimed to facilitate easier processing of personal data, certain aspects such as penal consequences, transitory provisions and exemptions for processing children\u2019s data may need to be analysed further to assess impact of these changes across different sectors.<\/p>\n

In view of its wide-ranging impact, it may be desirable for entities across all sectors to assess their data flows and processes, review notices, consent, policies, and related documentation, reimagine data collection, handling and processing practices and implement appropriate technical and organisational measures in compliance with the proposed law. As the 2023 Draft has been listed in the Government Business expected to be taken up in the ongoing Monsoon Session28<\/sup><\/a>, it is widely anticipated in the light of consultations, public debate and discourse, the Draft introduced and presented before the Parliament is likely to see the light of the day.<\/p>\n<\/div>\n

\n

\u2020 Executive Partner, Lakshmikumaran &<\/i> Sridharan Attorneys<\/span><\/strong><\/p>\n

\u2020\u2020 Senior Associate, Lakshmikumaran &<\/i> Sridharan Attorneys<\/span><\/strong><\/p>\n

1.<\/a> Digital Personal Data Protection Bill, 2022, available at <https:\/\/www.meity.gov.in\/writereaddata\/files\/The%20Digital%20Personal%20Data%20Potection%20Bill%2C%202022_0.pdf<\/a>>.<\/p>\n

2.<\/a> Lok Sabha Bulletin \u2014 Part II (General Information Relating to Parliamentary and Other Matters) dated 13-7-2023 11-7-2023, available here<\/a><\/p>\n

3.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 4.<\/p>\n

4.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 7.<\/p>\n

5.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 8.<\/p>\n

6.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 9(1).<\/p>\n

7.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 6.<\/p>\n

8.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 7(1).<\/p>\n

9.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 9(3).<\/p>\n

10.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 9(4).<\/p>\n

11.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 10.<\/p>\n

12.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 11.<\/p>\n

13.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 17.<\/p>\n

14.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 11.<\/p>\n

15.<\/a> \u201cPersonal Data Protection Bill May Have Relaxed Cross-Border Data Transfer Rules\u201d, The Hindu Business Line<\/i>, available at <https:\/\/www.thehindubusinessline.com\/info-tech\/personal-data-protection-bill-may-have-relaxed-cross-border-data-transfer-rules\/article67066688.ece<\/a>>.)<\/p>\n

16.<\/a> Soumyarendra Barik, \u201cData Protection Bill May Lower Age of Consent, Ease Related Norms\u201d, The Indian Express<\/i>, available at <https:\/\/indianexpress.com\/article\/business\/economy\/data-protection-bill-may-lower-age-of-consent-ease-related-norms-8822435\/<\/a>>.<\/p>\n

17.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 6.<\/p>\n

18.<\/a> Suraksha P. and Aashish Aryan, \u201cData Bill May Give Govt. Power to Lower the Age of Consent\u201d, The Economic Times<\/i>, available at <https:\/\/economictimes.indiatimes.com\/tech\/technology\/data-bill-may-give-govt-power-to-lower-the-age-of-consent\/articleshow\/101647708.cms?utm_source=contentofinterest&utm_medium=text&utm_campaign=cppst<\/a>>.<\/p>\n

19.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 18(3).<\/p>\n

20.<\/a> \u201cPersonal Data Protection Bill May Allow Exemptions for Indian Start-Ups\u201d, The Hindu Business Line<\/i>, available at <https:\/\/www.thehindubusinessline.com\/info-tech\/personal-data-protection-bill-may-allow-exemptions-for-indian-start-ups\/article67067055.ece<\/a>>.<\/p>\n

21.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 22(2).<\/p>\n

22.<\/a> Aihik Sur, \u201cData Protection Bill: Users May be Able to Appeal Decisions of Board with Another Body\u201d, Moneycontrol, available at <https:\/\/www.moneycontrol.com\/news\/business\/data-protection-bill-users-may-be-able-to-appeal-decisions-of-data-protection-board-with-another-body-10942341.html<\/a>>.<\/p>\n

23.<\/a> Digital Personal Data Protection Bill, 2022, Cl. 25(1).<\/p>\n

24.<\/a> \u201cData Protection Bill May Cap the Maximum Penalty for Violations at Rs 250 Crore\u201d, The Hindu Business Line<\/i>, available at <https:\/\/www.thehindubusinessline.com\/info-tech\/data-protection-bill-may-cap-the-maximum-penalty-for-violations-at-rs-250-crore\/article67067128.ece<\/a>>.<\/p>\n

25.<\/a> Digital Personal Data Protection Bill, 2022, Sch. 1.<\/p>\n

26.<\/a> Suraksha P. and Aashish Aryan, \u201cData Bill May Give Govt. Power to Lower the Age of Consent\u201d, The Economic Times<\/i>, available at <https:\/\/economictimes.indiatimes.com\/tech\/technology\/data-bill-may-give-govt-power-to-lower-the-age-of-consent\/articleshow\/101647708.cms?utm_source=contentofinterest&utm_medium=text&utm_campaign=cppst<\/a>>.<\/p>\n

27.<\/a> Suraksha P. and Aashish Aryan, \u201cData Bill May Give Govt. Power to Lower the Age of Consent\u201d, The Economic Times<\/i>, available at <https:\/\/economictimes.indiatimes.com\/tech\/technology\/data-bill-may-give-govt-power-to-lower-the-age-of-consent\/articleshow\/101647708.cms?utm_source=contentofinterest&utm_medium=text&utm_campaign=cppst<\/a>>.<\/p>\n

28.<\/a> Lok Sabha Bulletin \u2014 Part II (General Information Relating to Parliamentary and Other Matters) dated July 13, 2023 11-7-2023, available here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

by Prashant Phillips† and Sameer Avasarala††
\nCite as: 2023 SCC OnLine Blog Exp 61<\/p>\n","protected":false},"author":8808,"featured_media":297295,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[20271,54388],"tags":[59507,59511,59508,16161,59506,59509,31395,59510,47256,59512],"class_list":["post-297289","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-experts_corner","category-lakshmikumaran-sridharan","tag-comprehensive-framework","tag-data-fiduciaries","tag-data-principals","tag-data-protection","tag-data-protection-in-india","tag-digital-personal-data-protection-bill","tag-ministry-of-women-and-child-development","tag-monsoon-session","tag-personal-data","tag-verifiably-safe"],"yoast_head":"\nPreparing for a Comprehensive Framework for Data Protection in India | SCC Times<\/title>\n<meta name=\"description\" content=\"Data Protection in India is set to undergo a transformative change as the Parliament\u2019s Monsoon Session commences\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Preparing for a Comprehensive Framework for Data Protection in India\" \/>\n<meta property=\"og:description\" content=\"Data Protection in India is set to undergo a transformative change as the Parliament\u2019s Monsoon Session commences\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/\" \/>\n<meta property=\"og:site_name\" content=\"SCC Times\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/scc.online\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-20T05:30:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-27T09:20:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2023\/07\/comprehensive-framework-for-data-protection-in-india.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"886\" \/>\n\t<meta property=\"og:image:height\" content=\"590\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Bhumika Indulia\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Preparing for a Comprehensive Framework for Data Protection in India\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bhumika Indulia\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/\"},\"author\":{\"name\":\"Bhumika Indulia\",\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/#\\\/schema\\\/person\\\/919ec47cc1b871b362af05740398033a\"},\"headline\":\"Preparing for a Comprehensive Framework for Data Protection in India\",\"datePublished\":\"2023-07-20T05:30:24+00:00\",\"dateModified\":\"2023-07-27T09:20:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/\"},\"wordCount\":1945,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/comprehensive-framework-for-data-protection-in-india.webp\",\"keywords\":[\"Comprehensive Framework\",\"data fiduciaries\",\"data principals\",\"Data Protection\",\"Data Protection in India\",\"Digital Personal Data Protection Bill\",\"Ministry of Women and Child Development\",\"Monsoon Session\",\"personal data\",\"verifiably safe\"],\"articleSection\":[\"Experts Corner\",\"Lakshmikumaran & Sridharan\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/\",\"url\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/\",\"name\":\"Preparing for a Comprehensive Framework for Data Protection in India | SCC Times\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/comprehensive-framework-for-data-protection-in-india.webp\",\"datePublished\":\"2023-07-20T05:30:24+00:00\",\"dateModified\":\"2023-07-27T09:20:19+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/#\\\/schema\\\/person\\\/919ec47cc1b871b362af05740398033a\"},\"description\":\"Data Protection in India is set to undergo a transformative change as the Parliament\u2019s Monsoon Session commences\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/comprehensive-framework-for-data-protection-in-india.webp\",\"contentUrl\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/comprehensive-framework-for-data-protection-in-india.webp\",\"width\":886,\"height\":590,\"caption\":\"comprehensive framework for data protection in india\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/2023\\\/07\\\/20\\\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Preparing for a Comprehensive Framework for Data Protection in India\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/\",\"name\":\"SCC Times\",\"description\":\"Bringing you the Best Analytical Legal News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/#\\\/schema\\\/person\\\/919ec47cc1b871b362af05740398033a\",\"name\":\"Bhumika Indulia\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/84c1b51748d0297cf12e5a898eccb7bd3eb5f0ab4ae8e275e2e65c4c83f84740?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/84c1b51748d0297cf12e5a898eccb7bd3eb5f0ab4ae8e275e2e65c4c83f84740?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/84c1b51748d0297cf12e5a898eccb7bd3eb5f0ab4ae8e275e2e65c4c83f84740?s=96&d=mm&r=g\",\"caption\":\"Bhumika Indulia\"},\"url\":\"https:\\\/\\\/www.scconline.com\\\/blog\\\/post\\\/author\\\/editor_1\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Preparing for a Comprehensive Framework for Data Protection in India | SCC Times","description":"Data Protection in India is set to undergo a transformative change as the Parliament\u2019s Monsoon Session commences","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/","og_locale":"en_US","og_type":"article","og_title":"Preparing for a Comprehensive Framework for Data Protection in India","og_description":"Data Protection in India is set to undergo a transformative change as the Parliament\u2019s Monsoon Session commences","og_url":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/","og_site_name":"SCC Times","article_publisher":"https:\/\/www.facebook.com\/scc.online\/","article_published_time":"2023-07-20T05:30:24+00:00","article_modified_time":"2023-07-27T09:20:19+00:00","og_image":[{"width":886,"height":590,"url":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2023\/07\/comprehensive-framework-for-data-protection-in-india.jpg","type":"image\/jpeg"}],"author":"Bhumika Indulia","twitter_card":"summary_large_image","twitter_title":"Preparing for a Comprehensive Framework for Data Protection in India","twitter_misc":{"Written by":"Bhumika Indulia","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#article","isPartOf":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/"},"author":{"name":"Bhumika Indulia","@id":"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/919ec47cc1b871b362af05740398033a"},"headline":"Preparing for a Comprehensive Framework for Data Protection in India","datePublished":"2023-07-20T05:30:24+00:00","dateModified":"2023-07-27T09:20:19+00:00","mainEntityOfPage":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/"},"wordCount":1945,"commentCount":0,"image":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#primaryimage"},"thumbnailUrl":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2023\/07\/comprehensive-framework-for-data-protection-in-india.webp","keywords":["Comprehensive Framework","data fiduciaries","data principals","Data Protection","Data Protection in India","Digital Personal Data Protection Bill","Ministry of Women and Child Development","Monsoon Session","personal data","verifiably safe"],"articleSection":["Experts Corner","Lakshmikumaran & Sridharan"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/","url":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/","name":"Preparing for a Comprehensive Framework for Data Protection in India | SCC Times","isPartOf":{"@id":"https:\/\/www.scconline.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#primaryimage"},"image":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#primaryimage"},"thumbnailUrl":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2023\/07\/comprehensive-framework-for-data-protection-in-india.webp","datePublished":"2023-07-20T05:30:24+00:00","dateModified":"2023-07-27T09:20:19+00:00","author":{"@id":"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/919ec47cc1b871b362af05740398033a"},"description":"Data Protection in India is set to undergo a transformative change as the Parliament\u2019s Monsoon Session commences","breadcrumb":{"@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#primaryimage","url":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2023\/07\/comprehensive-framework-for-data-protection-in-india.webp","contentUrl":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2023\/07\/comprehensive-framework-for-data-protection-in-india.webp","width":886,"height":590,"caption":"comprehensive framework for data protection in india"},{"@type":"BreadcrumbList","@id":"https:\/\/www.scconline.com\/blog\/post\/2023\/07\/20\/preparing-for-a-comprehensive-framework-for-data-protection-in-india\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.scconline.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Preparing for a Comprehensive Framework for Data Protection in India"}]},{"@type":"WebSite","@id":"https:\/\/www.scconline.com\/blog\/#website","url":"https:\/\/www.scconline.com\/blog\/","name":"SCC Times","description":"Bringing you the Best Analytical Legal News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.scconline.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.scconline.com\/blog\/#\/schema\/person\/919ec47cc1b871b362af05740398033a","name":"Bhumika Indulia","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/84c1b51748d0297cf12e5a898eccb7bd3eb5f0ab4ae8e275e2e65c4c83f84740?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/84c1b51748d0297cf12e5a898eccb7bd3eb5f0ab4ae8e275e2e65c4c83f84740?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/84c1b51748d0297cf12e5a898eccb7bd3eb5f0ab4ae8e275e2e65c4c83f84740?s=96&d=mm&r=g","caption":"Bhumika Indulia"},"url":"https:\/\/www.scconline.com\/blog\/post\/author\/editor_1\/"}]}},"jetpack_featured_media_url":"https:\/\/www.scconline.com\/blog\/wp-content\/uploads\/2023\/07\/comprehensive-framework-for-data-protection-in-india.webp","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/posts\/297289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/users\/8808"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/comments?post=297289"}],"version-history":[{"count":0,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/posts\/297289\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/media\/297295"}],"wp:attachment":[{"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/media?parent=297289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/categories?post=297289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.scconline.com\/blog\/wp-json\/wp\/v2\/tags?post=297289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}