Aadhaar will be subordinate to the data protection framework under the draft Personal Data Protection Bill, says legal expert Rahul Matthan.(Photo for representation)
Aadhaar will be subordinate to the data protection framework under the draft Personal Data Protection Bill, says legal expert Rahul Matthan.(Photo for representation)

Would be difficult for businesses to operate: Legal expert Rahul Matthan on data protection Bill

Rahul Matthan, partner-lawyer in technology and media practice at Trilegal, speaks to HT about his understanding of the draft Personal Data Protection Bill. The proposed law drafted by a committee headed by former Supreme Court judge BN Srikrishna was submitted to the government on Friday.
By Nakul Sridhar | HT Correspondent, New Delhi
PUBLISHED ON JUL 28, 2018 11:20 PM IST

Rahul Matthan, a partner-lawyer in technology and media practice at the law firm Trilegal and author of Privacy 3.0, spoke to Hindustan Times about his understanding of the draft Personal Data Protection Bill, what works and what doesn’t, and the way ahead. The proposed law drafted by a committee headed by former Supreme Court judge BN Srikrishna was submitted to the government on Friday. Edited excerpts:

After having taken a closer look, what are your thoughts on the draft Bill and the committee’s report?

When you read the Bill and the report together, you realise there is a lot in the report that fleshes out some of the concepts in the Bill. There is a significant discussion around the concept of significant data fiduciary. This is a category of data fiduciaries which, on the basis of large volume of personal data processed or turnover, is subject to a higher standard of privacy. For these fiduciaries, there are additional obligations that would apply, such as doing a Data Protection Impact Assessment. They are quite significant obligations. It would apply to a certain class of fiduciaries, such as hospitals, which possess a lot of medical data.

Could the law have been retrospective?

I don’t think so. It is terribly complicated as it is. The law says that anything going forward from the day the law takes effect needs to comply with the law. Even that is really complicated, because it’s not like everyone is going to stop processing data, wait for the law to come into effect, and start again.

The draft Bill says it aims at combining user data with common good for citizens. Do you think this draft Bill has achieved that?

That’s a really difficult question. One of my concerns with the Bill is I think it’s going to become very difficult for businesses, the data fiduciaries, to operate. Companies are not used to this level of collecting or processing personal data. That would be a huge shock to the system. The Bill talks more about direct data collection, such as data collected from a person to open a bank account. It doesn’t say much about the data collected, say for example, by Netflix to target better movies at you. When it comes to this, it is going to be much more challenging for both businesses as well as users.

Also read: How India’s proposed data privacy bill compares with protection laws across the world

What will this mean for Aadhaar? Has the committee underestimated the concerns on Aadhaar or is it right?

Aadhaar will be subordinate to the data protection framework under this law. The Aadhaar Act may have certain provisions that talk about how you need to protect information under it. But Aadhaar will be used outside this construct as well. Now those uses will need to come under the larger data protection law. There is a recommendation that says the Aadhaar authentication services must be used only by the government. It is not the place of the committee to look into that as it is a matter currently before the Supreme Court. So it’s unfortunate that recommendations on sub-judice matters have been made.

Is the draft tilted towards government regulation?

In only one case. The whole penalty regime is meaningless to the government because they don’t have a turnover. Paying a penalty is not an issue for them. This is a serious gap in the way the framework is structured. There is a section for offences which applies to both people as well as the government. But the government has several exceptions. So how are we going to hold them accountable?

How will data localisation impact businesses?

I think this is a very serious concern. There are many views on it and it’s a polarizing topic. I don’t think we should have data localisation. I think it’s not good for business. The recommendation to have a mirror server in India is also a bit of a problem. Start-ups can easily open an Amazon cloud server and just start without any expenditure. Once you start this data mirroring, it’s going to be very difficult. I have a feeling this is going to have a chilling effect on innovation.

What does this mean for Facebook and WhatsApp as well as their users?

Both Facebook and WhatsApp comply with Europe’s General Data Protection Regulations (GDPR), so they will already have similar kinds of provisions in place. So they can modify their privacy slightly, at least for the plain vanilla clauses, to comply with the Indian law. But it does affect them in the case of data localization. They may have to look at how their costs are going to be affected.

Users get the ‘Right to Data Portability.’ It’s there in GDPR as well. You can ask Facebook to give you a copy of all the data on you, it’ll be given to you. Can you port data such that your likes and profiles on Facebook can be shared with, say, Google? That is special media graph portability, which is something that all the social media giants have been resisting. I don’t know if that is the extent to which data portability will go.

What are some of the recommendations you would keep, and three you would modify or discard from this draft?

A lot of the general obligations are all fine. I like the data portability framework. It is very powerful for users to move data from say one person to another. And you can do it through a consent dashboard. In my mind, I think they have gone overboard with notices, obligations to maintain a record of consent. I am very keen to remove data localisation provisions. As much as we say we must do Artificial Intelligence and big data, this Bill can even harm them due to the purpose and use limitation. Big data works on a lot of data. Only de-identified data that can’t be traced to an individual should have been allowed for data fiduciaries to use for big data. This would have been a forward-thinking way.

SHARE THIS ARTICLE ON
app
Close
Farmers participate in a tractor rally to protest against the newly passed farm bills, on a highway on the outskirts of New Delhi (REUTERS)
Farmers participate in a tractor rally to protest against the newly passed farm bills, on a highway on the outskirts of New Delhi (REUTERS)

Stage set for mega tractor rally; Parliament march on Feb 1

By Zia Haq, Hindustan Times, New Delhi
PUBLISHED ON JAN 26, 2021 01:01 AM IST
  • The police say about 30,000 tractors are likely to participate in the rally, but farm leaders said the number of vehicles will be closer to 200,000.
Close
A SSB personnel on alert at Rajpath near India Gate on the eve of Republic Day, in New Delhi(Sanjeev Verma/ Hindustan Times)
A SSB personnel on alert at Rajpath near India Gate on the eve of Republic Day, in New Delhi(Sanjeev Verma/ Hindustan Times)

Republic Day 2021: List of police personnel who received gallantry medals

By hindustantimes.com, Hindustan Times, New Delhi
PUBLISHED ON JAN 26, 2021 12:11 AM IST
  • The break-up of 946 police personnel who have been awarded medals on the occasion of the Republic Day, 2021.
Close
Prime Minister Narendra Modi addresses the Climate Adaptation summit in the Netherlands via video conferencing. (ANI)
Prime Minister Narendra Modi addresses the Climate Adaptation summit in the Netherlands via video conferencing. (ANI)

'Change lifestyle to adapt to climate change': PM Modi

By HT Correspondent, New Delhi
UPDATED ON JAN 25, 2021 11:59 PM IST
  • "We have promised ourselves that we will not just meet our Paris Agreement targets but exceed them...” PM Modi said.
Close
A note by the Lokayukta suggested “unpleasant circumstances” and “hostile environment” as the reason to quit forthwith but “upon dismissal of writ petition (by Nagaland government)” by the Supreme Court..(HT PHOTO)
A note by the Lokayukta suggested “unpleasant circumstances” and “hostile environment” as the reason to quit forthwith but “upon dismissal of writ petition (by Nagaland government)” by the Supreme Court..(HT PHOTO)

Willing to resign, Nagaland Lokayukta tells SC, seeks protection from state

By Abraham Thomas
PUBLISHED ON JAN 25, 2021 11:55 PM IST
  • The Nagaland government had come to the Supreme Court in exceptional circumstances for orders to restrain the sitting Lokayukta from hearing any case or exercising his powers or functions under the Nagaland Lokayukta Act, 2017.
Close
The chief minister said the state government was announcing the ex gratia in honour of the bravery shown by Col Santosh Babu while fighting the Chinese troops.(HT PHOTO.)
The chief minister said the state government was announcing the ex gratia in honour of the bravery shown by Col Santosh Babu while fighting the Chinese troops.(HT PHOTO.)

He deserved top medal: Col Santosh Babu's kin disappointed with Maha Vir Chakra

By Srinivasa Rao Apparasu | Edited by Sparshita Saxena, Hyderabad
UPDATED ON JAN 25, 2021 11:42 PM IST
  • His mother said she was not at all happy to receive the news that her son was conferred Maha Vir Chakra. “I expected the top medal, not this,” she said.
Close
Representative Photo(PTI )
Representative Photo(PTI )

Republic Day 2021: Govt announces gallantry award winners. Full list here

By hindustantimes.com | Edited by Amit Chaturvedi
PUBLISHED ON JAN 25, 2021 11:07 PM IST
The wartime Chakra series awards include highest Paramvir Chakra, Mahavir Chakra and Vir Chakra. The peacetime highest gallantry awards include Ashok Chakra, Kirti Chakra and Shaurya Chakra.
Close
President Ram Nath Kovind addresses to the nation on the eve of 72nd Republic Day, in New Delhi. (ANI Photo)
President Ram Nath Kovind addresses to the nation on the eve of 72nd Republic Day, in New Delhi. (ANI Photo)

'India foiled expansionist move in Ladakh': President's veiled dig at China 

ANI, New Delhi
PUBLISHED ON JAN 25, 2021 10:58 PM IST
The President said that soldiers of the armed forces ensure security of our national boundaries amid severest conditions including in Galwan Valley and Siachen.
Close
"Our national interest will be protected at all costs," the President declared in his address to the nation on the eve of the 72nd Republic Day.(ANI Photo)
"Our national interest will be protected at all costs," the President declared in his address to the nation on the eve of the 72nd Republic Day.(ANI Photo)

President Kovind says Indian armed forces 'adequately mobilised'

PTI, New Delhi
PUBLISHED ON JAN 25, 2021 10:57 PM IST
President Ram Nath Kovind's remarks came amid the nearly nine-month-long military standoff with China in eastern Ladakh.
Close
ITBP personnel during the full dress rehearsal for the upcoming Republic Day Parade, in New Delhi. (ANI)
ITBP personnel during the full dress rehearsal for the upcoming Republic Day Parade, in New Delhi. (ANI)

Attending Republic Day ceremony in Delhi compulsory, Govt tells officers

PUBLISHED ON JAN 25, 2021 10:57 PM IST
  • In a letter sent to all government ministries and departments Cabinet Secretary Rajiv Gauba warned "that serious view would be taken" against those who fail to attend the ceremony despite invitations
Close
Covid-19 vaccination at a government hospital.(AP)
Covid-19 vaccination at a government hospital.(AP)

Odisha meets over 92% of Covid-19 vaccination target, leads among all states

By Debabrata Mohanty | Edited by Sparshita Saxena, Bhubaneswar
UPDATED ON JAN 25, 2021 10:54 PM IST
  • Of the 1.92 lakh beneficiaries that were to be vaccinated till January 25, the state has covered 1.77 lakh.
Close
Former Assam chief minister Tarun Gogoi passed away on Monday.(Photo: INCIndia/ Twitter)
Former Assam chief minister Tarun Gogoi passed away on Monday.(Photo: INCIndia/ Twitter)

Republic Day 2021: Tarun Gogoi, Ram Vilas Paswan among 10 Padma Bhushan awardees

Written by Prashasti Singh
UPDATED ON JAN 25, 2021 10:55 PM IST
Prominent Shia preacher and scholar Shri Kalbe Sadiq was the third person to have received the award posthumously this year.
Close
A security personnel keeps vigil at Rajpath on the eve of the Republic Day parade, in New Delhi.(PTI)
A security personnel keeps vigil at Rajpath on the eve of the Republic Day parade, in New Delhi.(PTI)

Senior officers must attend R-Day event at Rajpath or face action: Govt

PTI
PUBLISHED ON JAN 25, 2021 10:48 PM IST
"You may suitably advise all officers of your ministry/ department, who are invited to the Republic day ceremony at Rajpath, to attend the function," the letter by Cabinet Secretary Rajiv Gauba said.
Close
President Ram Nath Kovind addresses to the nation on the eve of 72nd Republic Day, in New Delhi. (ANI Photo)
President Ram Nath Kovind addresses to the nation on the eve of 72nd Republic Day, in New Delhi. (ANI Photo)

Full text: President Ram Nath Kovind’s speech on eve of 72nd Republic Day

By hindustantimes.com | Edited by Mallika Soni
PUBLISHED ON JAN 25, 2021 10:44 PM IST
Here’s the full text of President Kovind’s speech
Close
Karur: Congress leader Rahul Gandhi interacts with a woman at the 'Farmers Convention' at Vangal Marigoundan Palayam, during his election campaign for the forthcoming Tamil Nadu Assembly polls, in Karur, (PTI)
Karur: Congress leader Rahul Gandhi interacts with a woman at the 'Farmers Convention' at Vangal Marigoundan Palayam, during his election campaign for the forthcoming Tamil Nadu Assembly polls, in Karur, (PTI)

Rahul Gandhi wraps up Tamil Nadu campaign; attacks AIADMK, BJP

By Divya Chandrababu, Chennai
UPDATED ON JAN 25, 2021 10:30 PM IST
  • “The chief minister is corrupt so he’s being controlled by the prime minister,” said Gandhi during his roadshow in Karur district.
Close
CEO of Zoho Corporation Sridhar Vembu(Image via Twitter)
CEO of Zoho Corporation Sridhar Vembu(Image via Twitter)

Wrestler Virender Singh, Zoho founder, Bombay Jayashri among Padma Shri awardees

By hindustantimes.com | Edited by Mallika Soni
PUBLISHED ON JAN 25, 2021 10:25 PM IST
Industrialists conferred with Padma Shri include Rajnikant Devidas Shroff (UPL Ltd); Rajni Bector (Mrs Bector’s Food Company); P Subramanian (Shanthi Gears) and Sridhar Vembu (Zoho).
Close
SHARE
Story Saved
OPEN APP