The Union Cabinet has given its nod to the draft of the Digital Personal Data Protection (DPDP) Bill 2023, which is set to be introduced during the forthcoming monsoon session of Parliament. An official source revealed that the bill includes provisions similar to the previous draft issued by the Ministry of Electronics and Information Technology (MeitY) for public consultation.
A key aspect of the DPDP Bill is the proposal to impose penalties of up to Rs. 250 crore on entities found in violation of the prescribed norms. The bill aims to create a robust framework for safeguarding personal data and holding organizations accountable for any breaches.
“The Cabinet has approved the draft of the DPDP bill, and it will be tabled in Parliament during the upcoming session,” stated the source familiar with the matter.
The monsoon session of Parliament is scheduled to take place from July 20 to August 11.
Importantly, government entities will not be granted blanket exemption under the proposed law. Disputes will be resolved by a Data Protection Board, and citizens will have the right to claim compensation by approaching civil courts. The source emphasized that the legislation is an evolving process, with several aspects expected to be refined over time.
Once the law is implemented, individuals will have the right to seek information about the collection, storage, and processing of their personal data, enhancing transparency and empowering users to have greater control over their information.
Union Minister Rajeev Chandrasekhar has stressed that the upcoming Digital Personal Data Protection Bill will bring about “deep behavioral changes” among platforms operating in India that have long exploited or misused personal data. He sought to address concerns surrounding the government-appointed fact-check body, stating that the intent is not censorship but rather an opportunity for the government to counter misinformation effectively, an essential aspect of a vibrant democracy.
The minister highlighted the distinction between misinformation and the right to free speech, pointing out that false information tends to spread at a significantly faster pace and reaches a larger audience compared to the truth. Chandrasekhar emphasized the criticality of providing the government with the means to refute false claims that may incite violence, generate hatred, or foster mistrust.
The DPDP Bill aims to establish a comprehensive data protection regime in India, aligning the nation with global standards and reinforcing citizens’ rights to privacy and control over their personal data. As the legislation progresses through Parliament, stakeholders will closely monitor its provisions and impact on various sectors, recognizing the potential for significant changes in data handling practices and accountability for entities operating in the digital ecosystem.
