Digital India needs a firm legal framework for data protection is the foundation on which data-driven innovation and entrepreneurship can flourish in India. Fostering such innovation and entrepreneurship is essential if India is to lead its citizens and the world into a digital future committed to empowerment, experiment and equal access. Government of India has published Data Protection Framework in India

1. Ravindra Dastikop
Twitter : @dastikop
#ThePracticeofDigitalIndia
The Practice of Digital India
Data Protection Framework in India
Seven Key Principles
November 2017

2. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
INTRODUCTION
Instrumentally, a firm legal framework for data protection is the
foundation on which data-driven innovation and entrepreneurship
can flourish in India. Fostering such innovation and
entrepreneurship is essential if India is to lead its citizens and the
world into a digital future committed to empowerment, experiment
and equal access.

3. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Data protection principles are designed to protect the personal information
of individuals by restricting how such information can be collected, used
and disclosed

4. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
The GOI has published a white paper on Data
Protection in India and sought public comments on
the same

5. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Data Protection Framework in India
Seven Key Principles

6. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Principle 1 :
Technology agnosticism- The law must be technology
agnostic. It must be flexible to take into account
changing technologies and standards of compliance.

7. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Principle 2 :
Holistic application- The law must apply to both private sector entities and
government. Differential obligations may be carved out in the law for
certain legitimate state aims

8. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Principle- 3
Informed consent- Consent is an expression of human
autonomy. For such expression to be genuine, it must be
informed and meaningful. The law must ensure that
consent meets the aforementioned criteria

9. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Principle 4:
Data minimisation- Data that is processed ought to be
minimal and necessary for the purposes for which such
data is sought and other compatible purposes beneficial
for the data subject

10. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Principle 5
Controller accountability- The data controller shall be
held accountable for any processing of data, whether by
itself or entities with whom it may have shared the data
for processing

11. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Principle 6
Structured enforcement- Enforcement of the data protection framework
must be by a high-powered statutory authority with sufficient capacity. This
must coexist with appropriately decentralised enforcement mechanisms.

12. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Principle 7
Deterrent penalties- Penalties on wrongful processing
must be adequate to ensure deterrence.

13. Ravindra Dastikop Twitter : @dastikop #ThePracticeofDigitalIndia
The Practice of Digital India
Information source:
http://meity.gov.in/writereaddata/files/white_
paper_on_data_protection_in_india_171127_fi
nal_v2.pdf