Explained: How India’s data protection Bill compares with EU regulation

The JCP recommendations on the Personal Data Protection Bill are in some aspects very similar to global standards such as European Union's General Data Protection Regulation, but differs in aspects such as jail terms. Take a look

India's Joint Committee of Parliament has made 99 recommendations to the Bill.

The JCP recommendations on the Personal Data Protection Bill are in some aspects very similar to global standards such as European Union’s General Data Protection Regulation, but differs in aspects such as jail terms. Take a look:

The similarities between EU’s General Data Protection Regulation and JCP recommendations on Data Protection Bill:

* Consent

EU: Users must have informed consent about the way their data is processed so that they can opt in or out.

Story continues below this ad

India: Processing of data should be done in a fair and transparent manner, while also ensuring privacy

* Breach

EU: Supervisory authority must be notified of a breach within 72 hours of the leak so that users can take steps to protect information

India: Data Protection Authority must be informed within 72 hours; DPA will decide whether users need to be informed and steps to be taken

* Transition period

EU: Two-year transition period for provisions of GDPR to be put in place

Story continues below this ad

India: 24 months overall; 9 months for registration of data fiduciaries, 6 months for DPA to start

* Data fiduciary

EU: Data fiduciary is any natural or legal person, public authority, agency or body that determines purpose and means of data processing

India: Similar suggestions; additionally, NGOs which also process data to be included as fiduciaries

Difference between EU’s regulation and JCP recommendations:

* Anonymous information

Story continues below this ad

EU: Principles of data protection do not apply to anonymous information since it is impossible to tell one from another

India: Non-personal data must come under the ambit of data protection law such as non-personal data

* Punishment

EU: No jail terms. Fines up to 20 million euros, or in the case of an undertaking, up to 4 % of their total global turnover of the preceding fiscal year

India: Jail term of up to 3 years, fine of Rs 2 lakh or both if de-identified data is re-identified by any person.

Story continues below this ad

Newsletter | Click to get the day’s best explainers in your inbox

India will be back on negotiating table in 1-2 months seeking a deal, 'saying sorry', says US Commerce Secretary Lutnick

India will be back seeking a deal, ‘saying sorry’, says US Commerce Secretary Lutnick

Business10 hr ago

US Commerce Secretary Howard Lutnick predicts that India will apologise and return to the negotiating table within the next month or two to sign a trade deal with the US. He urges India to choose between supporting the US or aligning with Russia and China. Lutnick also criticised India's retaliatory tariffs and calls Prime Minister Modi's meeting with Chinese and Russian leaders "bravado."

View all shorts

More Explained

Explained What Rajasthan’s coaching centre Bill says, why it matters so much