Explained: How India’s data protection Bill compares with EU regulation

The similarities between EU’s Common Knowledge Safety Regulation and JCP suggestions on Knowledge Safety Invoice:

* Consent

EU: Customers should have knowledgeable consent about the way in which their knowledge is processed in order that they’ll decide in or out.

India: Processing of knowledge must be performed in a good and clear method, whereas additionally guaranteeing privateness

* Breach

EU: Supervisory authority have to be notified of a breach inside 72 hours of the leak in order that customers can take steps to guard data

India: Knowledge Safety Authority have to be knowledgeable inside 72 hours; DPA will determine whether or not customers must be knowledgeable and steps to be taken

* Transition interval

EU: Two-year transition interval for provisions of GDPR to be put in place

India: 24 months general; 9 months for registration of knowledge fiduciaries, 6 months for DPA to begin

* Knowledge fiduciary

EU: Knowledge fiduciary is any pure or authorized particular person, public authority, company or physique that determines goal and means of knowledge processing

India: Comparable strategies; moreover, NGOs which additionally course of knowledge to be included as fiduciaries

Distinction between EU’s regulation and JCP suggestions:

* Nameless data

EU: Rules of knowledge safety don’t apply to nameless data since it’s inconceivable to inform one from one other

India: Non-personal knowledge should come below the ambit of knowledge safety regulation reminiscent of non-personal knowledge

* Punishment

EU: No jail phrases. Fines as much as 20 million euros, or within the case of an enterprise, as much as 4 % of their whole international turnover of the previous fiscal yr

India: Jail time period of as much as 3 years, high-quality of Rs 2 lakh or each if de-identified knowledge is re-identified by any particular person.

E-newsletter | Click on to get the day’s finest explainers in your inbox