

The Cabinet has given its approval to the revised version of India’s long-awaited data protection law, signaling its potential presentation before Parliament during the upcoming Monsoon Session. Several changes have been incorporated into the law, while certain aspects have remained unchanged.
The reworked data protection law introduces notable modifications aimed at addressing concerns and strengthening provisions related to data protection, privacy, and security. These changes emphasize the importance of informed consent from individuals and impose greater accountability on organizations handling personal data. Stricter guidelines for data processing and storage have been implemented to enhance data protection measures.
Another significant change pertains to cross-border data transfers. The revised law now includes provisions to regulate such transfers and ensure the adequate protection of data when it is transferred outside of India. These measures aim to maintain data security and safeguard personal information in cross-border scenarios.
However, certain fundamental aspects of the data protection law have remained consistent. The establishment of a Data Protection Authority (DPA) remains a key feature of the law, responsible for overseeing the implementation and enforcement of the legislation. The DPA will play a vital role in monitoring compliance, addressing complaints, and enforcing penalties for non-compliance.
As the reworked data protection law progresses towards Parliament in the Monsoon Session, it will undergo further scrutiny and deliberation. This provides an opportunity to assess and potentially refine the proposed changes while ensuring that the core principles of data protection and individual privacy are upheld.