Personal data is the new ‘oil’, a protection law was much needed, says ex-Lt Gen

Lt Gen Rajesh Pant, the former National Cyber Security Coordinator, has emphasized the need for a law on personal data protection in India. He highlighted the increased digitization due to the pandemic, which has led to the misuse of people’s personal data. The Digital Personal Data Protection (DPDP) Act 2023 is in line with the General Data Protection Regulation (GDPR) in the European Union and includes provisions for consent, purpose, and duration of data collection. The Act also introduces penalties, including fines up to Rs 250 crore for data breaches. The formation of a Data Protection Board of India (DPBI) is also proposed.