Govt plans penalty of up to ₹500 crore for breach of data

The government on Friday released the draft personal data protection bill, seeking to provide a framework for a strict user-consent regime for data processing, along with a penalty of up to Rs 500 crore for data breaches by social media and net companies while offering concessions to tech firms.

- [e-mail]

New Delhi: 

Tech majors such as Google, Amazon and Meta are seen benefitting from the new draft which eases certain curbs on cross-border data transfer — unlike previous versions where conditions had been specified — although it’s silent on the need to maintain mirror copies (within India) of “sensitive personal data” such as financial, health and biometric information of users. In August, the government had junked the earlier draft.

The global outfits had opposed restrictions on the transfer of such data as well as the need to store it within India (data localisation) and had instead advocated seamless movement.

Fresh draft nulls earlier penalty plan for serious breach