Government is strict on data security, deadline for implementing DPDP law reduced, tension of tech companies increased:

News India Live, Digital Desk: The Government of India is now in no mood for any delay regarding digital security and privacy of citizens’ data. Digital Personal Data Protection (DPDP) The Ministry of Electronics and IT (MeitY) has taken a major step to make the law fully effective. The government has reduced the 18-month grace period given to companies to comply with the rules. 12 months It has been proposed to do.

This tough stance of the government has created a stir among tech giants like Google, Meta and Amazon.

MeitY’s new proposals: what will change?

After a high-level meeting held on January 22, the ministry has sent an email to digital companies seeking feedback by February 4. Following are the main proposals of the government:

Deadline Reduction: To fully comply with the law, companies will now have to enter only 18 12 months Will get time.

Rules applicable with immediate effect: Some important provisions like Rule 15 (Data Research and Archiving) and Rule 23 effective immediately It is proposed to do.

Data for legal investigation: Rule 8(3), which allows retention of data for the purpose of legal investigation, has been 3 months Can be implemented within.

What will be the impact on companies?

After this step of the government, big tech companies Significant Data Fiduciaries (Critical Data Trustee). This means that they:

Regular data audit Will have to do.

of data processing risk assessment Will have to report.

Our algorithm Will have to be investigated.

The user consent mechanism will have to be made more transparent.

Reason behind reducing the time limit

The government believes that if the deadline remains 18 months, then companies will keep postponing work till the last moment. The 12-month deadline will force companies to improve their systems and make technical changes from now on. The government’s clear message is that Data privacy is no longer an option but a necessity.

Industry reaction

Tech companies argue that changing data systems, user consent mechanisms and grievance redressal systems on such a large scale requires a lot of time and resources. However, the ministry will take the final decision only after taking feedback from all parties.