The article provides a brief overview of the legal framework relating to data protection and privacy and discusses the provisions of relevant data protection and data privacy laws in India. It also discusses proposed legislative changes in India to strengthen and improve the existing data protection regime.
Data Privacy
Technological development has always outpaced privacy concerns, but never more so than in the past decade. Collection and centralization of personally identifiable information (PII), tracking of movements and digital surveillance are all at unprecedented levels. Regulations and laws are only just beginning to catch up to the ability of both governments and private entities to deploy these capabilities.
What exactly is there to worry about? The mass collection and centralization of data by giant multinationals such as Facebook and Google is as good of a place to start as any. Two decades of vacuuming up the personal data of users of various online services has created the most impressive marketing capabilities in history, but these profiles have astounding potential for damage when they are used the wrong way or fall into the wrong hands.
Unauthorized information that is captured in data breaches tends to find its way to massive “combo lists” that are sold and traded on the dark web. Social security numbers are added from this breach, home addresses and phone numbers from that one, personal health information from yet another. Soon, a frighteningly complete profile of millions of individuals is available to anyone willing to pay the asking price.
These are just the established data privacy issues. The emerging ones are even worse. High-quality facial recognition technology is just beginning to roll out across the public places of some countries. Artificial intelligence is not only making mass facial recognition possible, but magnifies the power and reach of any application that involves capturing and sorting information: scanning pictures, analyzing speech, sifting through text and location data. This threatens to not only shatter anonymity and privacy, but allow for highly advanced impersonation and take the concept of “identity theft” to new levels.
Some businesses chafe at the trouble and added expense of new and emerging data privacy regulations, but they are vital to both protecting rights and privacy and instilling confidence in end users. Customers want to be able to submit their payment information without worry about data breaches and identity theft, use services without wondering what is being done with their personal information and use devices without fear of surveillance or having location data tracked. The need for meaningful safeguards only grows greater as technological capabilities increase.
European Commission is deliberating whether to adopt a three to five-year facial recognition ban that will give them some time to figure out how best to regulate the new technology.
In line with the Trump administration's recent overtures toward a nationwide TikTok ban, the new bill if passed would ban TikTok on all devices throughout the US government.
MIT is proposing the use of health certification and digital identity tracking to anonymize personal data and protect user privacy while determining who can safely return to work.
Cisco Report Finds Data Privacy a Top Priority for Security Professionals During Pandemic Conditions
Data privacy report from Cisco finds that the roles of security professionals are evolving in response to regulatory changes and the specific pressures created by the COVID-19 pandemic.
Complexity of data privacy compliance is significantly increased by growing cloud adoption rates. A delegated governance model based on a centralized platform with decentralized policy implementation overcomes these difficulties.
Sam Altman's Worldcoin project will not be available in Spain for up to three months, and may face future actions under the GDPR. The country's data protection authority, the AEPD, has ordered the company to stop collecting personal information due to privacy concerns.
The DuckDuckGo disclosure is an opportunity to reflect, for individuals and companies alike. As an individual, who defines what privacy means to you? As an organization, is your internal definition of "user privacy" consistent with what your users expect?
TikTok is facing a new complaint on child privacy accusing the platform for not removing videos posted by minors and not making reasonable effort to collect parental consent for new accounts.
Face search engines that trawl the internet are not a new concept, but this apparent level of accuracy (backed by an advanced AI algorithm) has not previously been made available to the general public.









