India’s Personal Data Protection Bill (“PDP Bill”), 2018: Brief Introduction, Key Provisions and Comparison with GDPR

Abstract

In today's digital age, a primary point of concern for the individuals is breach of their privacy. India currently lacks any comprehensive data protection regime which can protect its citizens against such violations of their privacy in this digital age. India's current data protection regime is primarily governed by the Information Technology Act, 2000 (“IT Act”), and the Information Technology (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 (“IT Rules”). The IT Act and the IT Rule did not prove to be sufficient and effective in dealing with the privacy and data protection violations in India. There was an urgent need to have a comprehensive data protection law in India and hence, the Personal Data Protection Bill, 2018 (“PDP Bill”) has been introduced in India and most likely will be turned into law after the Bhartiya Janata Party (BJP) led government is formed.