NEW DELHI: Government has increased fines up to Rs 500 crore for breach of provisions proposed in draft Digital personal data The Protection Bill 2022 was enacted on Friday.
Personal draft data protection bill in 2019 proposed a fine of Rs 15 crore or 4% of an entity’s global turnover.
Draft proposal to establish a Data Protection Commission of Indiawill perform the functions prescribed by the bill.
“If the Board determines at the conclusion of its investigation that a person’s non-compliance is substantial, then, after providing that person with a reasonable opportunity to be heard, impose financial penalties as specified in Annex 1, not to exceed 500 rupees in each case,” the draft said.
The draft proposed a classified penalty system for data trustees to handle personal data of the data owner only in accordance with the provisions of the Act.
The same set of penalties will be applied to a Data Processor — which will be an entity that will process data on behalf of a Data Trustee.
The draft proposes a penalty of up to Rs 250 crore in the event a Data Trustee or Data Processor fails to protect against breaches of personal data in their possession or under their control.
The draft is open for public comment until December 17.
Personal draft data protection bill in 2019 proposed a fine of Rs 15 crore or 4% of an entity’s global turnover.
Draft proposal to establish a Data Protection Commission of Indiawill perform the functions prescribed by the bill.
“If the Board determines at the conclusion of its investigation that a person’s non-compliance is substantial, then, after providing that person with a reasonable opportunity to be heard, impose financial penalties as specified in Annex 1, not to exceed 500 rupees in each case,” the draft said.
The draft proposed a classified penalty system for data trustees to handle personal data of the data owner only in accordance with the provisions of the Act.
The same set of penalties will be applied to a Data Processor — which will be an entity that will process data on behalf of a Data Trustee.
The draft proposes a penalty of up to Rs 250 crore in the event a Data Trustee or Data Processor fails to protect against breaches of personal data in their possession or under their control.
The draft is open for public comment until December 17.
