Blog

This post sets out our key takeaways from the draft Digital Personal Data Protection Bill 2022, and lays down how key provisions have changed from earlier iterations of the bill – i.e., the Joint Parliamentary Committee’s Data Protection Bill, 2021 and the Personal Data Protection Bill, 2019. On 18 November 2022, the Indian government publishedRead more

I. Introduction The APAC region has been at the vanguard of digitisation, digital innovation, and digital governance.[1] However, differences in legal regimes in the region have meant that any regional or global privacy initiatives such as the APEC Privacy Framework,[2] APEC Cross Border Privacy Rules System (CBPR),[3] or the Osaka Declaration of Digital Economy[4] doRead more

Introduction Kenya enacted the Data Protection Act, 2019 (hereinafter, the “Act”) in November 2019.[1] It is a comprehensive statute that governs the collection, processing and storage of personal data by government and private actors. It establishes an ecosystem of rights and obligations that operationalises the right to privacy enshrined in the Kenyan Constitution. The immediateRead more

I. Introduction In the previous post, we examined the data governance framework in Indonesia, one of the few countries in the APAC region that has not signed the Osaka Declaration. In this post, we examine the data governance framework of Malaysia, the only country in our blog series, which was not a part of theRead more

I. Introduction In this post, we examine the data governance framework of Indonesia, from the perspective of: data processing and other obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);the penal and enforcement framework (V); and the exemptions given to state agencies (VI). Part VII concludes. Although the ConstitutionRead more

I. Introduction In this post, we examine the data governance framework of Vietnam. We discuss: grounds of processing data and the obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);the penal and enforcement framework (V); and the exemptions given to state agencies (VI). Part VII concludes. Although the ConstitutionRead more

1. Introduction In the previous post, we examined the data governance framework in Singapore, an active player in the APAC region. In this post, we unpack Japan’s data protection framework, from the perspective of: grounds of processing data and the obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);theRead more

I. Introduction In the previous post, we examined the data governance framework in Australia. In this post, we examine the data governance framework of another country in the APAC region, namely Singapore, from the perspective of: data processing obligations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);the penal and enforcement framework (V);Read more

I. Introduction In the previous post we examined the applicable data governance frameworks in the APAC region, with a specific focus on the Osaka Declaration. The success of the Osaka Declaration depends on different APAC countries adopting a common framework of data governance rules. In this post, we examine the data governance framework in Australia,Read more

I. Introduction The Asia-Pacific, or APAC region, comprising of countries such as Australia, China, India, Japan, Singapore, Indonesia, and Vietnam,[1] has the largest number of internet users in the world, at around 2.1 billion.[2] The region also accounts for 64% of the global e-commerce sales.[3] For a variety of cultural, political, and economic reasons, theRead more