Introduction South Africa has witnessed numerous, significant data breaches.[1] A notable instance was when the servers of one of South Africa’s best known real estate companies was breached and the personal data of 31.6 million persons, including that of the President and the Finance Minister, was put at risk.[2] The information included ID numbers, age,Read more
Blog
Introduction Kenya enacted the Data Protection Act, 2019 (hereinafter, the “Act”) in November 2019.[1] It is a comprehensive statute that governs the collection, processing and storage of personal data by government and private actors. It establishes an ecosystem of rights and obligations that operationalises the right to privacy enshrined in the Kenyan Constitution. The immediateRead more
I. Introduction In the previous post, we examined the data governance framework in Indonesia, one of the few countries in the APAC region that has not signed the Osaka Declaration. In this post, we examine the data governance framework of Malaysia, the only country in our blog series, which was not a part of theRead more
There is an ancient proverb that says “a journey of a thousand miles begins with a single step”. In today’s context, if the journey is an organisation’s efforts to comply with its data protection obligations, then the single step is the process of taking stock of all the personal data it holds. This process ofRead more
The Indian government’s endeavour to regulate the collection and use of personal data dates back to 2012 when the A.P. Shah led committee released its report on privacy[1]. Seven years hence, the much awaited Personal Data Protection Bill, 2019 (“2019 Bill”)[2] was introduced by the Ministry of Electronics and Information Technology in the seventeenth Lok SabhaRead more
The Personal Data Protection Bill, 2019 was introduced in the Parliament of India on 10 December 2019, and referred to a Joint Committee. This legislation will require businesses to revamp their data-handling practices and embed privacy into their systems and operations. Our team has put together two documents to help organisations prepare for this forthcoming law andRead more
The Personal Data Protection Bill, 2019 (“Bill”) was introduced in the Lok Sabha (lower house of the Indian Parliament) on 10 December 2019. Once enacted, this Bill will require a large number of companies (both Indian and foreign) to revamp their operational practices. This post provides an overview of the major practical concerns raised byRead more
On 08 July, 2019, Dr. Harsh Vardhan, minister for health and family welfare, science and technology and earth sciences[1] introduced the DNA Technology (Use and Application) Regulation Bill, 2019[2] (“Bill”) in the Indian Lok Sabha[3]. The Bill was referred to the standing committee on science and technology, environment and forests (“Standing Committee”). Comments to theRead more
Context: In response to the Ministry of Electronics and Information Technology’s (“MeITY”) call for comments on the Personal Data Protection Bill, 2018 (“Bill”), Ikigai Law and Inc42 submitted a consolidated set of comments reflecting the views of certain startups on the proposed law. These comments were published in connection with ‘The Dialogue’[1] – a roundtableRead more
The draft Personal Data Protection Bill, 2018 (“Bill”) raises many concerns for businesses – start-ups and established companies alike. Companies will be required to revamp several of their operational practices once the Bill becomes an enforceable law. This post provides an overview of some of the practical concerns raised by the Bill to give aRead more