Tighten data protection rules

Rules for the protection of personal data are wholly inadequate, the Telecom Regulatory Authority of India has warned. The regulator also indicated that a general data protection regulation would soon be introduced in India. That won’t be a moment too soon as we know the hazards of personal data being in the hands of companies like Google, Facebook, Twitter, Instagram, Amazon, Flipkart, Netflix and others. Strict new rules on user data privacy were enforced in Europe, covering the data of all Europeans, whether they live there or not. Once collected, data can only be used for the specific purpose of providing the service the user opts for.

India will be on the right path if it enforced robust data protection rules for its citizens. An important new regulation may have to do with the user having a right to be forgotten, that literally means service providers must erase all personal data relating to the consumer. The amount of data a user gives away on registering for the services of many Internet giants is huge. They may be doing so even now when many firms are revising their contracts with users after the tighter EU and American regulations. It’s laughable how little time we spend in studying the terms and conditions and what we agree to even after the huge row over user data being given away, including to questionable firms using or intending to use such data to manipulate voters’ choices in elections. The best way to ensure the protection of Indians’ data is to emulate Europe and the United States and bring in a comprehensive policy soon.