[GS Paper 2 – Govt. Policies and Interventions]
Context – The Centre recently withdrew the long-awaited Personal Data Protection (PDP) Bill, 2019 to replace it with a new bill with a ‘comprehensive framework’ and ‘contemporary digital privacy laws’.
- The PDP bill was first introduced in Lok Sabha on December 11, 2019. The bill was referred to the Joint Parliamentary Committee, which tabled its report in Lok Sabha on December 16, 2021.
- The committee proposed a single law for dealing with both personal and non-personal datasets. The report was also under dispute as it suggested moving towards complete localisation of data.
- A statement containing the reasons for the withdrawal was circulated to the members of Lok Sabha.
- Reportedly the statement included that the government was working on a comprehensive legal framework considering 81 amendments and 12 recommendations proposed by the JPC.
Features of the Withdrawn Bill
- The withdrawn Bill had proposed restrictions on the use of personal data without the explicit consent of citizens.
- It had also sought to provide the government with powers to give exemptions to its probe agencies from the provisions of the Act, a move that was strongly opposed by the opposition MPs who had filed their dissent notes.
- The withdrawn data protection Bill had also proposed the setting up of a Data Protection Authority.
- It had also proposed to specify the flow and usage of personal data, protect the rights of individuals whose personal data are processed, as it works out the framework for the cross-border transfer, accountability of entities processing data, and moots remedies for unauthorized and harmful processing.