To date, India has not to date enacted specific legislation on data privacy, with personal data mostly protected through indirect safeguards developed by the courts under common law, principlesof equity and the law of breach of confidence.
The Government of India has proposed a draft statute on data protection, the Personal Data Protection Bill 2019 (PDPB), that is still being debated within parliamentary circles.
The Bill covers mechanisms for protection of personal data and proposes the setting up of a Data Protection Authority of India, requirements for technology companies to obtain explicit permission for most uses of personal data and allowing citizens more ownership over their personal data and proposes a maximum penalty of up to 4% of a company’s global revenue (as with GDPR).
For updates on changes in legislation
Sign Up for Vox updates on the PDPB
Follow the Legislative updates by clicking on the link to the PDPB updates website