Centre Releases Draft Rules For Digital Personal Data Protection Act

After much anticipation, the electronics and IT ministry (MeitY) has released the draft rules for the Digital Personal Data Protection Act for public consultations till February 18. 

The proposed rules outline that data fiduciaries (entities that determine how personal data is processed) will need to provide data principals (end users whose data they are collecting) necessary details for them to give specific and informed consent for the processing of their personal data. 

This notification should include an itemised description of the type of personal data that will be aggregated and the specific purpose for that data. With this, the users will have the power to withdraw their consent and make a complaint to the Data Protection Board of India for any violation.

“A Data Fiduciary shall protect personal data in its possession or under its control, including in respect of any processing undertaken by it or on its behalf by a Data Processor, by taking reasonable security safeguards to prevent personal data breach,” the draft bill reads. 

(The story will be updated soon)

The post Centre Releases Draft Rules For Digital Personal Data Protection Act appeared first on Inc42 Media.