Digital Personal Data Protection Bill 2022: 7 principles that drive the new bill

The government has released the first draft of the Digital Personal Data Protection Bill for public consultation, asking stakeholders to submit their views on it by December 17. The government withdrew the draft Personal Data Protection Bill in August this year after working on it for five years. The Digital Personal Data Protection Bill 2022 is based on the principles around the Data Economy. These principles are claimed to have been used as the basis for personal data protection laws in various jurisdictions. The actual implementation of such laws has allowed the emergence of a more nuanced understanding of personal data protection wherein individual rights, public interest and ease of doing business especially for startups are balanced.
The first principle is that usage of personal data by organisations must be done in a manner that is lawful, fair to the individuals concerned and transparent to individuals.
The second principle of purpose limitation is that the personal data is used for the purposes for which it was collected.
The third principle of data minimisation is that only those items of personal data required for attaining a specific purpose must be collected.
The fourth principle of accuracy of personal data is that reasonable effort is made to ensure that the personal data of the individual is accurate and kept up to date.
The fifth principle of storage limitation is that personal data is not stored perpetually by default. The storage should be limited to such duration as is necessary for the stated purpose for which personal data was collected.
The sixth principle is that reasonable safeguards are taken to ensure that there is no unauthorised collection or processing of personal data. This is intended to prevent personal data breach.
The seventh principle is that the person who decides the purpose and means of processing of personal data should be accountable for such processing.

Read More