Blog

A detailed clause-wise analysis of the Parliamentary committee’s report on India’s data protection law. On 16 December 2021, the Joint Parliamentary Committee on the Personal Data Protection Bill, 2019 tabled its report in Parliament. The committee recommends expanding the Bill’s scope to include non-personal data, imposing greater restrictions on cross-border data flows, removing the tradeRead more

The post is an overview of our comments to the National Health Authority’s consultation papers on a proposed building block of the National Digital Health Mission, namely the unified health interface. The consultation papers sought comments on the design and governance for creating and sustaining the unified health interface . Background: In August 2020, PrimeRead more

The post is an overview of our comments to the National Health Authority’s consultation papers on two building blocks of the National Digital Health Mission, namely the health facility registry and the healthcare professionals’ registry. The consultation papers sought comments on the design and governance of these building blocks. Background: In August 2020, Prime MinisterRead more

This blogpost summarizes some of the key reports that have been released by the Standing Committee on Information Technology since its inception. Since its inception, the Standing Committee on Information Technology (“SCIT”) has released 305 reports. Out of these, 55 reports were on different subjects and 14 reports were on different Bills referred to theRead more

I. Introduction The APAC region has been at the vanguard of digitisation, digital innovation, and digital governance.[1] However, differences in legal regimes in the region have meant that any regional or global privacy initiatives such as the APEC Privacy Framework,[2] APEC Cross Border Privacy Rules System (CBPR),[3] or the Osaka Declaration of Digital Economy[4] doRead more

Introduction Kenya enacted the Data Protection Act, 2019 (hereinafter, the “Act”) in November 2019.[1] It is a comprehensive statute that governs the collection, processing and storage of personal data by government and private actors. It establishes an ecosystem of rights and obligations that operationalises the right to privacy enshrined in the Kenyan Constitution. The immediateRead more

I. Introduction In this post, we examine the data governance framework of Indonesia, from the perspective of: data processing and other obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);the penal and enforcement framework (V); and the exemptions given to state agencies (VI). Part VII concludes. Although the ConstitutionRead more

I. Introduction In this post, we examine the data governance framework of Vietnam. We discuss: grounds of processing data and the obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);the penal and enforcement framework (V); and the exemptions given to state agencies (VI). Part VII concludes. Although the ConstitutionRead more

1. Introduction In the previous post, we examined the data governance framework in Singapore, an active player in the APAC region. In this post, we unpack Japan’s data protection framework, from the perspective of: grounds of processing data and the obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);theRead more

A. INTRODUCTION: On 11 May 2020, the Ministry of Electronics and Information Technology (“MeitY”) released the ‘Aarogya Setu Data Access and Knowledge Sharing Protocol’ (“Protocol”). The Protocol is issued by the chairperson of the ‘empowered group on technology and data management’ (“EG”), which is one of the 11 empowered groups created by the National ExecutiveRead more