Data Privacy Day 2024: India’s Outlook for the Year
As the digital landscape continues to expand, the threat of data breaches has become a significant concern worldwide. Recognizing the need to address this issue, the Council of Europe established Data Privacy Day in 2007. Over the years, this international event has evolved to raise awareness and promote best practices in privacy and data protection.
In India, this year’s Data Privacy Day holds particular significance in light of the Digital Personal Data Protection (DPDP) Act, which was enacted in August 2023. This legislation aims to regulate the handling of digital personal data, ensuring individuals’ rights to safeguard their information while allowing for lawful processing of such data.
Balaji Rao, Area Vice President for India & SAARC at Commvault, highlights that the DPDP Act represents a significant milestone in India’s privacy-focused digital strategy. This legislation demonstrates the country’s commitment to aligning with international data protection standards. The Act has also led to the establishment of a Data Protection Board, which oversees compliance and addresses grievances.
Reuben Koh, Director of Security Strategy – Asia Pacific & Japan at Akamai Technologies, emphasizes the importance of confidentiality, integrity, and availability of private data in data protection efforts. He commends the DPDP Act as a significant advancement for India and urges acknowledgment of the journey that led to its implementation.
Currently, India relies on the Information Technology (IT) Act of 2000 to regulate the use of personal data. However, the DPDP Act is a comprehensive framework comparable to the General Data Protection Regulation (GDPR) of the European Union. Sameer Dhanrajani, CEO at 3AI, highlights the Act’s customization to address India’s specific needs and obstacles, instilling confidence in the prompt resolution of complaints.
While India takes significant strides in data protection, it also faces the growing threat of ransomware attacks. According to a report by Check Point, global ransomware attacks increased by 7% in 2023, with 10% of organizations worldwide being targeted. In response, Priya Kanduri, Senior Vice President & CTO (IMSS) at Happiest Minds Technologies, urges the adoption of advanced AI techniques to minimize cyber-attacks and enhance security measures.
Ramprakash Ramamoorthy, Director of AI Research at Zoho Corp, highlights the challenge of innovating while safeguarding privacy in an evolving AI landscape. He emphasizes the responsible utilization and advancement of AI, with privacy being a key factor for sustainable development.
In addition to the challenges posed by ransomware attacks, a major personal data breach recently shocked India. The sensitive personal data of 81.5 million Indian users, including Aadhaar and passport details, names, phone numbers, and addresses, was leaked and sold on the dark web. Vaibhav Tare, Chief Information Security Officer at Fulcrum Digital, highlights the adoption of the Data Empowerment and Protection Architecture (DEPA) as a solution to secure data transfers and ensure transparency.
Satya Machiraju, VP of IT & Information Security at Whatfix, emphasizes that while the DPDP Act aims to safeguard personal data, no regulation can provide absolute protection against misuse. He underscores the significance of organizations comprehending the regulations and implementing policies and procedures to adhere to them effectively. Raja Lakshmipathy, Vice President and Managing Director for Genesys India & SAARC region, further notes that while the DPDP Act fills legislative gaps, the pursuit of a comprehensive data protection framework remains ongoing.
In summary, India’s outlook for Data Privacy Day 2024 is shaped by the significant strides made with the implementation of the DPDP Act. As the country tackles cybersecurity challenges, it must prioritize advanced AI techniques, secure data transfers, and ongoing efforts to enhance data protection frameworks. By doing so, India aims to protect the privacy and personal information of its citizens in an increasingly digital world.
