This write-up describes first impressions of the 2022 Indian bill dealing with data protection. It has not been edited, and considering that it's been drafted after close to 36 hours without sleep — some days are especially long — it will almost certainly be rethought and edited at some point. It's difficult to miss the deficiencies of the 2022 Digital Data Protection Bill: the proposed statute appears to be well intentioned, and it does attempt to protect those whose data is collected — data principals as the document refers to them — but it's inability to set meaningful boundaries and to draft with a degree of specificity has resulted in its falling far short of its ostensible aims. The bill does not go so far as to explicitly state that only such personal data as is essential to provide services or goods may be collected and then retained for no longer than necessary or until the data principal withdraws consent for data retention. However, it does, through the Explana
IN Content Law
Exploring copyright, content, data, and related legal issues from an Indian perspective...