The Digital Personal Data Protection Bill 2022 is a proposed legislation in India that aims to provide for the processing of digital personal data in a manner that recognizes the right of individuals to protect their personal data, the need for fiduciaries to process personal data for legitimate purposes and the need for the development of the digital economy. The proposed bill introduces a penalty for non-compliance of up to INR 2,000 million (about USD 24.5 million) and obligates fiduciaries to notify data principals about breaches. It also proposes to establish a Data Protection Board of India (DPBI) that will be an independent body operating digitally and responsible for determining non-compliances under the legislation and imposing penalties. The DPDP Bill 2022 is the fourth iteration in a long series of draft laws and was released by the Ministry of Electronics and Information Technology (MeitY) on November 18, 2022.
The Digital Personal Data Protection Bill, 2022 is a legislation that regulates how various entities use personal data in India. The bill is aimed to provide protection of digital privacy and security of individuals. It defines the rights and duties of individuals and entities in processing personal data, with the entity in control of the personal data being called the “Data Fiduciary.” The bill incorporates hefty penalties for non-compliance, with fines reaching up to 4 percent of the total worldwide turnover of the entity. The bill has been revised and released by the Ministry of Electronics and Information Technology (MeitY) on November 18, 2022, and is focused on personal data, as compared to an earlier unwieldy draft. The revised version of the legislation is called the Digital Personal Data Protection Bill, 2022.
