The 'Digital Personal Data Protection Bill 2023' has been passed in the Lok Sabha. The bill was approved amid uproar by opposition MPs over the Manipur issue. Let us inform you that earlier on August 3, the Digital Personal Data Protection Bill 2023 was introduced in the Lok Sabha by Union IT Minister Ashwini Vaishnav. However, opposition MPs objected to the bill and demanded that it be referred to a parliamentary committee. Opposition MPs had said that through this bill the government wants to trample the Right to Information Act.
However, after all the protests and objections, the bill has been approved by the Lok Sabha. In such a situation, now the question is how will the data of Indian users be protected by this bill. How will the arbitrariness of social media companies be stopped with its help? Let us know in ten points.
Provisions of Data Protection Bill 2023
Social media firms using user data must protect personal data, even if it is accessing the data using third-party data processors.
In case of data breach or data theft, companies will have to inform the Data Protection Board (DPB) and users.
The data of children and the data of physically challenged persons accompanied by guardians will be accessed only after the guardians' permission.
Firms will have to appoint a data protection officer and users will have to be informed about it.
The Central Government shall have the power to prevent and restrict the transfer of personal data to any country or territory outside India.
Appeals against the decisions of the DPB will be heard by the Telecom Disputes Settlement and Appellate Tribunal.
The DPB can summon firms, examine them and inspect the books and documents of the companies.
DPB may impose penalties on firms after considering the nature and seriousness of the breach, the type of personal data affected.
The DPB can advise the government to block access to an intermediary if the provisions of the Bill are violated more than twice.
Firms can face a fine of up to Rs 250 crore for a data breach, failure to protect personal data or not informing DPB and users about the breach.
(pc amarujala)
