The Personal Data Protection Bill introduced in the Parliament on December 11 provides a framework to regulate the processing of personal data in India. It gives certain grounds for processing personal data along with obligations on those processing it. It creates and empowers a data protection authority to do the regulation. The success of such a law depends on how its purview is defined and how well it is implemented.
Carnegie does not take institutional positions on public policy issues; the views represented herein are those of the author(s) and do not necessarily reflect the views of Carnegie, its staff, or its trustees.