Blog

This post explores if Generative AI tools such as ChatGPT can collect our data from the Internet without our consent on the ground that the data is in the public domain. It also explores if ChatGPT’s recent ban in Italy over data protection norms has any lessons for India. This post was first published onRead more

This post sets out our key takeaways from the draft Digital Personal Data Protection Bill 2022, and lays down how key provisions have changed from earlier iterations of the bill – i.e., the Joint Parliamentary Committee’s Data Protection Bill, 2021 and the Personal Data Protection Bill, 2019. On 18 November 2022, the Indian government publishedRead more

A detailed clause-wise analysis of the Parliamentary committee’s report on India’s data protection law. On 16 December 2021, the Joint Parliamentary Committee on the Personal Data Protection Bill, 2019 tabled its report in Parliament. The committee recommends expanding the Bill’s scope to include non-personal data, imposing greater restrictions on cross-border data flows, removing the tradeRead more

The post is an overview of our comments to the National Health Authority’s consultation papers on a proposed building block of the National Digital Health Mission, namely the unified health interface. The consultation papers sought comments on the design and governance for creating and sustaining the unified health interface . Background: In August 2020, PrimeRead more

The post is an overview of our comments to the National Health Authority’s consultation papers on two building blocks of the National Digital Health Mission, namely the health facility registry and the healthcare professionals’ registry. The consultation papers sought comments on the design and governance of these building blocks. Background: In August 2020, Prime MinisterRead more

This blogpost summarizes some of the key reports that have been released by the Standing Committee on Information Technology since its inception. Since its inception, the Standing Committee on Information Technology (“SCIT”) has released 305 reports. Out of these, 55 reports were on different subjects and 14 reports were on different Bills referred to theRead more

I. Introduction The APAC region has been at the vanguard of digitisation, digital innovation, and digital governance.[1] However, differences in legal regimes in the region have meant that any regional or global privacy initiatives such as the APEC Privacy Framework,[2] APEC Cross Border Privacy Rules System (CBPR),[3] or the Osaka Declaration of Digital Economy[4] doRead more

Introduction Kenya enacted the Data Protection Act, 2019 (hereinafter, the “Act”) in November 2019.[1] It is a comprehensive statute that governs the collection, processing and storage of personal data by government and private actors. It establishes an ecosystem of rights and obligations that operationalises the right to privacy enshrined in the Kenyan Constitution. The immediateRead more

I. Introduction In this post, we examine the data governance framework of Indonesia, from the perspective of: data processing and other obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);the penal and enforcement framework (V); and the exemptions given to state agencies (VI). Part VII concludes. Although the ConstitutionRead more

I. Introduction In this post, we examine the data governance framework of Vietnam. We discuss: grounds of processing data and the obligations imposed on organisations (II);rights guaranteed to individuals (III); rules governing cross-border data flows (IV);the penal and enforcement framework (V); and the exemptions given to state agencies (VI). Part VII concludes. Although the ConstitutionRead more