Last week India released a new draft Digital Personal Data
Protection Bill, 2022 ("2022 Bill"). The
2022 Bill follows a previous draft bill that was first released in
2018, revised in 2019 and finally withdrawn in 2022, primarily
owing to strong criticism from a Parliamentary review committee.
The last bill was heavily inspired by the EU GDPR, the global
'gold standard'; but may be its very complexity was a
factor in its demise. The 2022 Bill seems to have learnt from the
fate of its predecessor, and will likely forge its own path in
furthering data regulation for the Indian context.
The 2022 Bill can be viewed
here, and certain explanatory notes are
available
here. The notes, in particular, make for
useful reading, in particular laying down a set of 'seven
principals' that have guided the formulation of this new
bill.
