Critical concerns with India’s upcoming Digital Personal Data Protection Bill

Just shy of six years on from the landmark Puttaswamy judgement—where India’s apex court ruled that privacy was a constitutional right—India is now a step closer to protecting the data of its citizens. This past week, the long-delayed Digital Personal Data Protection Bill 2022 (DPDPB) was finally cleared by the Union Cabinet and is anticipated to be tabled in the Monsoon Session of Parliament later this month.

The bill couldn’t be more critical to India’s digital future. With over 700 million Indians having access to the internet in 2022, according to a study by the Internet and Mobile Association of India (IAMAI), framing laws to protect the deluge of data flowing almost unrestricted through the country’s digital pipes is more vital than ever.

Made public late last year, the bill has some laudable provisions. For instance, the narrowing of its scope to personal data protection, the relaxation of data localisation rules, and the removal of criminal penalties will go a long way towards helping businesses effectively participate in India’s online future whilst also protecting citizens’ privacy.