Catergory

Data Protection

#DataProtectionTop10: On the Importance of a Strong, Transparent, and Independent Data Protection Authority

We analyse the provisions in the Personal Data Protection Bill, 2019 which relate to the Data Protection Authority of India (DPA) and its independence, transparency, and constitution. We recommend that it not be bound by the Central Government's orders.
28 May, 2021
6 min read

Featured

Cybersec Charcha: Understanding the booming ransomware industry

In the second edition of Cybersec Charcha, we are taking a deep dive into understanding the unregulated ransomware industry, what a ransomware attack means and the consequences it can have.
27 May, 2021
5 min read

Featured

Despite CIC’s observation that MeitY's response to us was “grossly improper," MeitY issues the same response again #SaveOurPrivacy

CIC directed the CPIO to re-visit our original RTI and provide a revised reply and info, if (comments on consultation on PDPB). However, the CPIO simply cited the same exemption under S.8 of the RTI Act that she had provided before the CIC.
26 May, 2021
6 min read

#DataProtectionTop10: State Security and Surveillance

In Part 7 of the #DataProtectionTop 10 series, we discuss the provisions in the Bill which enable the State to engage in large scale surveillance. Blanket exemptions without a sound oversight and review mechanism raise concerns. Thus, we recommend that a chapter on surveillance reforms be inserted.
25 May, 2021
8 min read

Featured

#DataProtectionTop10: Data Localisation

In part 6 of the #DataProtectionTop10 series, we look at the restrictions imposed by the PDPB on the transfer of personal data outside India. We recommend that the Bill explicitly define critical personal data and not impose undue restrictions that affect the open nature of the internet.
21 May, 2021
6 min read

Featured

#DataProtectionTop10: Voluntary Social Media Verification

In Part 5 of the #DataProtectionTop10 series, we analyse the various issues with the inclusion of social media intermediaries under the Personal Data Protection Bill, 2019, and the provision for voluntary verification of user accounts. We recommend that the relevant clauses be removed.
18 May, 2021
6 min read

#DataProtectionTop10: On the need to protect the rights of users

In part 4 of the #DataProtectionTop10 series, we explore the issues with the user rights under the Bill. Certain rights are not absolute and contain significant exemptions. The Bill also fails to include certain rights. To address these concerns, we recommend changes to strengthen user rights.
14 May, 2021
5 min read

#DataProtectionTop10: Exceptions to Consent - A Torn Safety Net

In part 3 of the #DataProtectionTop10 series, we look into various issues regarding the consent provisions for the processing of the personal data under the Personal Data Protection Bill, 2019.
11 May, 2021
7 min read

#DataProtectionTop10: Lost in Muddled Objectives

This is a new series on the Personal Data Protection Bill, 2019 to deal exclusively with the issues and pathways for reform under the Bill. In this post we look at the objective and the Preamble of the Bill, and guage whether the bill serve ordinary Indians or the government and large corporations.
04 May, 2021
6 min read

#StartfromScratch: Constitutional Utopias of Digital Protection

In the final piece in our series on the Data Protection Bill, we first explain the 7 fundamental principles of the Indian Privacy Code. Then we analyse two alternative data protection bills: the Data (Privacy and Protection) Bill, 2017 and the Personal Data and Information Privacy Code Bill, 2019.
23 April, 2021
9 min read

Donate to IFF

Help IFF scale up by making a donation for digital rights. Really, when it comes to free speech online, digital privacy, net neutrality and innovation — we got your back!