{"id":7683,"date":"2018-07-27T18:09:00","date_gmt":"2018-07-27T18:09:00","guid":{"rendered":"http:\/\/c0605335-1df2-45f1-9199-5933cf0ea7ba"},"modified":"2018-07-27T18:09:00","modified_gmt":"2018-07-27T18:09:00","slug":"india-desperately-needs-a-delayed-data-privacy-law","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/india-desperately-needs-a-delayed-data-privacy-law\/","title":{"rendered":"India desperately needs a delayed data privacy law"},"content":{"rendered":"

\"WhatsApp<\/span><\/a><\/p>\n

Video: WhatsApp limits message forwarding in India after mob lynchings<\/a><\/p>\n

\n

Featured stories<\/span><\/h3>\n<\/div>\n

As global cell phone companies plough ahead with trying to plant a device in the hands of every one of India’s 1.3 billion citizens<\/a> (smartphone penetration in the country is around 35 percent), the question of who is going to protect their rights is becoming more urgent by the day.<\/p>\n

Certainly, faith in the Indian government to do so seems to be overly optimistic. For one, gaping holes<\/a> have appeared in its Universal Identification program, Aadhar<\/a>, where millions of users’ account information (bank details, email IDs, etc) have been leaked through various government utility sites.<\/p>\n

Read also: A new data leak hits Aadhaar, India’s national ID database<\/a><\/strong><\/p>\n

Most worrying has been the government’s long silence when confronted with these leaks, followed by an obdurate denial about these instances, despite ample proof of the unsecured tranches of private information being easily accessible to anyone who wishes to illegally avail of them. Absurdly, in many instances, the government<\/a> has threatened prosecution of individuals who made public these breaches.<\/p>\n

Terrors of an invasive state don’t stop there. An RFP<\/a> put out by the government to global software firms listed in detail the need for heavy monitoring of Indian citizens’ social media<\/a> usage, creating conversation archives, “listening to email,” architecting a plan to “inculcate nationalistic feelings in the masses,” and manipulating discussions online with a positive spin in favour of India.<\/p>\n

If all this isn’t enough to make the informed citizen queasy, then the onslaught of online fraudsters<\/a> that have begun preying on millions of Indians should do the job.<\/p>\n

\n<\/section>\n

The problem is that while a massive amount of data is set to be generated in the next 10 years and beyond, no framework exists to protect Indians from marauders like Cambridge Analytica<\/a> that have begun preying on millions of Indians should do the job.<\/p>\n

One positive — and, some say, paradoxical — move by the government has been to appoint a 10-member committee<\/a> last year headed by Justice Srikrishna<\/a> for this purpose and a white paper that was released recently shows a desire to sculpt a law that will apply to all governmental and non-governmental parties that collect and process data after consent. A much-delayed draft law is expected by the end of August.<\/p>\n

Read also: WhatsApp rumors reportedly led to lynchings in India – CNET<\/a><\/strong><\/p>\n

According to Mint<\/em> newspaper<\/a>, over 150 lawyers, activists, and journalists have written to the Srikrishna committee and expressed their dissatisfaction with the transparency in the committee’s process. They fear it is stacked with members who echo the government’s stance with the Aadhar program. This is especially problematic considering the Aadhar number has become compulsory to even open a bank account or a cell phone connection, which is fundamentally unconstitutional when you factor in the right to privacy of an individual, recently affirmed by the Supreme Court.<\/p>\n

Meanwhile — and this may be fortuitous or deleterious, depending on how you interpret it — the Telecom Authority of India<\/a> (TRAI) that keeps tabs on the telecom sector in the country one-upped the Srikrishna committee and published its own<\/a> set of recommendations on data privacy, heavily favouring consumers and radically restricting ways in which entities both private and public can harvest and use consumer data.<\/p>\n

Even if TRAI was cheekily skipping over its de-facto jurisdiction, there’s now thankfully no room for the Srikrishna committee to gloss over any aspect of the data privacy debate.<\/p>\n

Read also: Bizarre mobile attack in India uses MDM to target only 13 phones – TechRepublic<\/a><\/strong><\/p>\n

Here are some important issues, outlined in Mint<\/em><\/a>, that experts and consumer advocates hope will be resolved when the report or draft bill comes out:<\/p>\n