Introduction
Data is the new oil in the digital age, and big data is a vital resource for many businesses. Big data is the term for enormous and intricate data collections that are examined for patterns, trends, and insights. Healthcare, banking, and retail are just a few of the industries that have been altered by the use of big data. However, there are legal repercussions associated with the gathering, handling, and analysis of big data, particularly with relation to data privacy.
Data privacy is the safeguarding of private data against unauthorised access, use, or disclosure. Any details that can be used to identify a specific person are considered personal data, including that person's name, address, date of birth, and social security number. Because significant volumes of personal data are gathered, handled, and analysed without people's knowledge or agreement, the usage of big data creates issues related to confidentiality.
Compliance with data protection rules is one of the legal ramifications of big data for businesses. Data protection regulations govern the gathering, processing, and storing of personal data in several nations, including the European Union and the United States. The General Data Protection Regulation (GDPR), for instance, mandates that organisations acquire individuals' agreement before collecting and using their personal data in the European Union. Individuals have the right to view personal data, ask for its erasure, and request that its processing be limited under the GDPR.
In India , data privacy and collection issues are regulated through the Information Technology Act , 2000.
Big data's potential for data breaches is another potential legal repercussion. Data breaches happen when unauthorised people get access to or steal personal information. Identity theft, financial ruin, and reputational harm can all result from data breaches. It is the responsibility of organisations that gather and process personal data to make sure that the information is secure. Firms must use appropriate safeguards, such as encryption and access controls, to protect personal data from unauthorised access.
Big data brings ethical questions in addition to legal ones. For instance, worries about racial profiling and discrimination are raised by the use of big data in predictive policing. Algorithms are used in predictive policing to pinpoint locations where crimes are most likely to happen and to identify potential criminals. However, these algorithms could be discriminatory and biassed against certain demographics.
The Information Technology Act , 2000
On the 17th October , 2000, the IT Act , 200 was passed. It was created for regulating all the cyber aspects of the country including : promote electronic governance, give online transactions legal protection, and combat cybercrime. Law's main objectives were to diminish or completely eradicate cybercrimes while facilitating legitimate, trustworthy digital, computerised, and online operations.
In order to bring legal consistency among various countries, the United Nations Commission On International Trade Law (UNCITRAL) adopted the UNCITRAL Model Law on Electronic Commerce (E-commerce) in 1996. This prompted the Government of India to enact legislation for India based on the UNCITRAL guidelines, which was later revised and approved by the Ministry of Electronics and Information Technology and became known as the Information Technology Act. India modified its cyberlaws, becoming the eleventh country to do so.
In addition to being applicable throughout all of India, the Information Technology Act, 2000 also provides extraterritorial jurisdiction, which covers cybercrimes committed outside of India. No matter where the criminal is from, if an Indian system or network is involved, the Act will apply.
In the case of Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), the Supreme Court of India declared the right to privacy and data protection to be a fundamental right. Additionally, the current legal framework for privacy is outlined in the Information Technology Rules, 2011 (IT Rules, 2011), which regulates the "collecting, receiving, possessing, storing, dealing, handling, retaining, using, transferring, disclosing sensitive personal data or information, security However, this clause is viewed as being insufficient since, among other things, it does not address the exploitation of data gathered from children, data breaches by companies outside of India, or the narrow definition of sensitive data.
Personal Data Protection Bills, 2021
The Personal Data Protection Bill, 2018, was the initial draught of the legislation produced by the Justice Srikrishna Committee, which was charged by the Ministry of Electronics and Information Technology (MeitY) with writing data protection legislation for India. This plan was implemented by the government and presented in Lok Sabha, but it was returned for revision.
The Personal Data Protection Bill, 2019, which had been introduced after that, was later withdrawn amid promises of a replacement policy that would recognise India's complex legal framework and take into account the other 81 changes recommended by the Joint Parliament Committee.
A single piece of legislation, the Data Protection Bill, 2021, was then proposed by the committee that would apply to both personal and non-personal datasets. The advice in the report to move towards complete localization of data was contested. The scrapped measure had also proposed a data protection authority. It had also recommended explicitly stating the flow and usage of personal data as well as defending the rights of individuals for whom the personal data are processed. This occurs as it develops the framework for the cross-border transfer, accountability of entities processing data, and potential remedies for unauthorised and harmful processing.
Digital Personal Data Protection Bill (DPDP Bill, 2022)
The Digital Personal Data Protection Bill (DPDP Bill, 2022) now governs all digital handling of private data. This would include any personally identifiable data collected offline or online and handled in a digital manner. This measure will have an impact on the legal protections provided to clients of Indian start-ups conducting business abroad, which will reduce their competitiveness. The bill, which exempts data fiduciaries in India who process personal data belonging to Indian nationals from applying to most of its safeguards, further supports this opinion. In the upcoming session of the parliament in 2023, this draught is anticipated to be submitted for approval.
Conclusion
To sum up, using big data has legal repercussions, especially in terms of data protection. Data protection regulations, personal data security, and ethical issues relating to the use of big data must all be addressed by organisations that gather and manage personal data. Organisations can safeguard personal information while gaining the advantages of big data through the implementation of a data privacy framework.
Citations
Data protection laws in India - iPleaders. (2023, February 3). iPleaders. https://blog.ipleaders.in/data-protection-laws-in-india-2/
India Law Journal. (n.d.). India Law Journal. https://www.indialawjournal.org/big_da
ta_a_challenge_to_data_protection.php
Comments
Post a Comment