Outside IN 对印度《数字个人数据保护法》的看法.pdf

1、Outside IN views on Indias Digital Personal Data Protection ActAbhishek Tiwari,FIP,CIPP/E,CIPMEducation Advisory Board MemberBangalore KnowledgeNet Chapter ChairLinkedIn Top AI Community VoiceManager,Digital Trust,KPMG IndiaWELCOME AND INTRODUCTIONSCharmian Aw,FIP,CIPP/E,A,US,CIPMPartnerSquire Patto

2、n Boggs(Singapore)Christopher Chew,CISSP,CCSK,PCIP,CIPP/A,CIPM,FIP,Privacy Engineering Section Advisory BoardTechnical Leader-Security&Digital Trust,Cisco CXTOThe Journey2017Supreme Court affirms privacy as fundamental right2021Parliamentary Committee report on PDPB2022Withdrawal of PDPB,2019 and re

3、lease of draft Digital Personal Data Protection Bill 2019Introduction of the Personal Data Protection Bill(PDPB)2017-2018Draft Data Protection Bill2023-AugustDBDP Bill,2023 was passed by both houses of the Parliament and received Presidential assent and notified in gazette to become an enforceable A

4、ct2023-JulyCabinet approval of the DPDP Bill2023-AugustComes into force on August 11The DPDPA 2023 is the onset of the data protection regime in India.It emphasizes and encourages organisations to protect digital personal data while safeguarding the freedom of individualsKey Highlights of DPDPAOrgan

5、izations processing large volumes of personal data will be categorized as Significant Data Fiduciary and will be required to comply with additional obligationsCross-border transfers have been permitted until explicitly restricted by the Government.However,stricter sectoral laws would continue to app

6、lyDPDPA has established a Data Protection Board to regulate data privacy frameworkOrganizations can continue to process employee personal data under legitimate interest without obtaining consentA layered penalty system has been implemented with severe violations like security failures leading to dat