Blog

A detailed clause-wise analysis of the Parliamentary committee’s report on India’s data protection law. On 16 December 2021, the Joint Parliamentary Committee on the Personal Data Protection Bill, 2019 tabled its report in Parliament. The committee recommends expanding the Bill’s scope to include non-personal data, imposing greater restrictions on cross-border data flows, removing the tradeRead more

This blog post examines the evolution of the AA Framework, and its role in the India Stack ecosystem. Our earlier blog was a primer to the NBFC account aggregator framework (“AA Framework”). In this one we take a closer look at the evolution of the AA Framework. And its role in the India Stack ecosystem.Read more

This piece explores the impact of India’s upcoming data protection law on payments businesses, with a focus on cross-selling and physical location of data storage. With India’s upcoming data protection on the horizon, businesses must take a close look at their existing data use practices. The Personal Data Protection Bill 2019 (PDPB) calls for structural, organisationalRead more

Introduction South Africa has witnessed numerous, significant data breaches.[1] A notable instance was when the servers of one of South Africa’s best known real estate companies was breached and the personal data of 31.6 million persons, including that of the President and the Finance Minister, was put at risk.[2] The information included ID numbers, age,Read more

Introduction Kenya enacted the Data Protection Act, 2019 (hereinafter, the “Act”) in November 2019.[1] It is a comprehensive statute that governs the collection, processing and storage of personal data by government and private actors. It establishes an ecosystem of rights and obligations that operationalises the right to privacy enshrined in the Kenyan Constitution. The immediateRead more

I. Introduction In the previous post, we examined the data governance framework in Indonesia, one of the few countries in the APAC region that has not signed the Osaka Declaration. In this post, we examine the data governance framework of Malaysia, the only country in our blog series, which was not a part of theRead more

There is an ancient proverb that says “a journey of a thousand miles begins with a single step”. In today’s context, if the journey is an organisation’s efforts to comply with its data protection obligations, then the single step is the process of taking stock of all the personal data it holds. This process ofRead more

The Indian government’s endeavour to regulate the collection and use of personal data dates back to 2012 when the A.P. Shah led committee released its report on privacy[1]. Seven years hence, the much awaited Personal Data Protection Bill, 2019 (“2019 Bill”)[2] was introduced by the Ministry of Electronics and Information Technology in the seventeenth Lok SabhaRead more

The Personal Data Protection Bill, 2019 was introduced in the Parliament of India on 10 December 2019, and referred to a Joint Committee. This legislation will require businesses to revamp their data-handling practices and embed privacy into their systems and operations. Our team has put together two documents to help organisations prepare for this forthcoming law andRead more

The Personal Data Protection Bill, 2019 (“Bill”) was introduced in the Lok Sabha (lower house of the Indian Parliament) on 10 December 2019. Once enacted, this Bill will require a large number of companies (both Indian and foreign) to revamp their operational practices. This post provides an overview of the major practical concerns raised byRead more