Regulators may have to ping data board on privacy matters

economictimes.indiatimes.com:

Data Protection Board (DPB) before making any rules or passing any directions that are likely to have a direct or indirect impact on personal data privacy and digital security of Indian citizens, a senior government official told ET. This, the official said, would be done to avoid any confusion and variance in regulations regarding rules on personal data of citizens. “The RBI, for example, has already some rules around how data fiduciaries such as banks and financial institutions should handle the personal data of their Indian users.

But for other regulators who might come up with their own principles in future, we would want them to consult the DPB,” the person said. It could come as part of regulations that are likely to be rolled out once the Digital Personal Data Protection Bill, 2023, becomes a law, the official said.ETtech Interview | Data Bill to make social media companies accountable, fortify IT industry: IT Minister Ashwini Vaishnaw Another official said these regulations would be in the form of an advisory rather than a directive. “The structure of the DPDP Bill is a horizontal one.

It has to work in consonance with the other present and future laws and regulations being planned. So, we have suggested a consultation (with the DPB),” one of the officials quoted above said. Allowing either other regulators or DPB to supersede would “undermine” the independence of others, the person added.

Such a clarification, a senior industry executive said, would be «a saner» approach to data storage. «If such a regulation comes, it would be easy for the industry to predict what the (sectoral) regulator would likely proscribe explicitly. Business decisions, therefore, become easier for companies,» the executive said.