India’s data rules will favour state and local firms

Subject India’s data ecosystem and reform outlook. Significance Prime Minister Narendra Modi’s second government is expected to revive its effort to enforce a new data protection framework. The draft 2018 Personal Data Protection (PDP) bill, deferred due to the April-May general elections, will be tabled afresh when the new parliament convenes from July. Impacts Policy push for data localisation and relatively open access to competing firms will not be reversed. This will be welcomed by large domestic corporates, while alientating foreign ‘big tech’. Cybersecurity of data stored by local corporates and the government will remain poor.

Subject Reform of data policies. Significance The central government is developing a new regulatory regime for data protection. The main elements likely in the regulatory push are elaborated in ‘The Personal Data Protection Bill, 2018’ (PDP bill) and the accompanying report entitled ‘A Free and Fair Digital Economy’ submitted to the government in July by the Justice BN Srikrishna committee of experts. Impacts The proposals, if implemented, would increase the state’s surveillance capabilities. New rules would also force large domestic firms to share their data, somewhat encouraging smaller entrants. The government will struggle to limit the spread of fake news and misinformation, even where these trigger violence.


Significance Such programmes contribute not only to Indonesia’s efforts to boost the cyber readiness of its booming digital economy, but are also designed to maintain China's friendly relations with South-east Asia’s largest economy amid the intensifying technology tensions between China and the United States. Impacts The Personal Data Protection Law would need to clarify key provisions and concepts to be effective. The BSSN’s extensive powers will fuel civil society concerns about excessive state surveillance. Turning down Chinese technology suppliers carries cost and wider economic ramifications for Jakarta.


Author(s):  
Agnese Reine-Vītiņa

Mūsdienās tiesības uz privāto dzīvi nepieciešamas ikvienā demokrātiskā sabiedrībā, un šo tiesību iekļaušana konstitūcijā juridiski garantē fiziskas personas rīcības brīvību un vienlaikus arī citu – valsts pamatlikumā noteikto – cilvēka tiesību īstenošanu [5]. Personas datu aizsardzības institūts tika izveidots, izpratnes par tiesību uz personas privātās dzīves neaizskaramību saturu paplašinot 20. gadsimta 70. gados, kad vairāku Eiropas valstu valdības uzsāka informācijas apstrādes projektus, piemēram, tautas skaitīšanu u. c. Informācijas tehnoloģiju attīstība ļāva arvien vairāk informācijas par personām glabāt un apstrādāt elektroniski. Viena no tiesību problēmām bija informācijas vākšana par fizisku personu un tiesību uz privātās dzīves neaizskaramību ievērošana. Lai nodrošinātu privātās dzīves aizsardzību, atsevišķas Eiropas valstis pēc savas iniciatīvas pieņēma likumus par datu aizsardzību. Pirmie likumi par personas datu aizsardzību Eiropā tika pieņemti Vācijas Federatīvajā Republikā, tad Zviedrijā (1973), Norvēģijā (1978) un citur [8, 10]. Ne visas valstis pieņēma likumus par datu aizsardzību vienlaikus, tāpēc Eiropas Padome nolēma izstrādāt konvenciju, lai unificētu datu aizsardzības noteikumus un principus. Nowadays, the right to privacy is indispensable in every democratic society and inclusion of such rights in the constitution, guarantees legally freedom of action of a natural person and, simultaneously, implementation of other human rights established in the fundamental law of the state. The institute of personal data protection was established by expanding the understanding of the content of the right to privacy in the 70’s of the 19th century, when the government of several European countries initiated information processing projects, such as population census etc. For the development of information technology, more and more information on persons was kept and processed in electronic form. One of the legal problems was gathering of information on natural persons and the right to privacy. In order to ensure the protection of privacy, separate European countries, on their own initiative, established a law on data protection. The first laws on the protection of personal data in Europe were established in the Federal Republic of Germany, then in Sweden (1973), Norway (1978) and elsewhere. Not all countries adopted laws on data protection at the same time, so the Council of Europe decided to elaborate a convention to unify data protection rules and principles.


Significance The experience of surfing the net is vastly different for women, who have been disproportionately at the receiving end of cybercrimes that undermine their safety online. As elsewhere, the forms of online offence included bullying, stalking, impersonation and non-consensual pornography. Impacts Lack of online safety will limit the female customer base of digital platforms. Entrenched weaknesses of the judicial systems impede reporting and conviction of cybercrime. Civil society demands for a personal data protection law will rise.


2020 ◽  
Vol 28 (4) ◽  
pp. 531-553 ◽  
Author(s):  
Aggeliki Tsohou ◽  
Emmanouil Magkos ◽  
Haralambos Mouratidis ◽  
George Chrysoloras ◽  
Luca Piras ◽  
...  

Purpose General data protection regulation (GDPR) entered into force in May 2018 for enhancing personal data protection. Even though GDPR leads toward many advantages for the data subjects it turned out to be a significant challenge. Organizations need to implement long and complex changes to become GDPR compliant. Data subjects are empowered with new rights, which, however, they need to become aware of. GDPR compliance is a challenging matter for the relevant stakeholders calls for a software platform that can support their needs. The aim of data governance for supporting GDPR (DEFeND) EU project is to deliver such a platform. The purpose of this paper is to describe the process, within the DEFeND EU project, for eliciting and analyzing requirements for such a complex platform. Design/methodology/approach The platform needs to satisfy legal and privacy requirements and provide functionalities that data controllers request for supporting GDPR compliance. Further, it needs to satisfy acceptance requirements, for assuring that its users will embrace and use the platform. In this paper, the authors describe the methodology for eliciting and analyzing requirements for such a complex platform, by analyzing data attained by stakeholders from different sectors. Findings The findings provide the process for the DEFeND platform requirements’ elicitation and an indicative sample of those. The authors also describe the implementation of a secondary process for consolidating the elicited requirements into a consistent set of platform requirements. Practical implications The proposed software engineering methodology and data collection tools (i.e. questionnaires) are expected to have a significant impact for software engineers in academia and industry. Social implications It is reported repeatedly that data controllers face difficulties in complying with the GDPR. The study aims to offer mechanisms and tools that can assist organizations to comply with the GDPR, thus, offering a significant boost toward the European personal data protection objectives. Originality/value This is the first paper, according to the best of the authors’ knowledge, to provide software requirements for a GDPR compliance platform, including multiple perspectives.


Significance Once finalised and promulgated, probably sometime in late 2021 or 2022, it will be China’s first comprehensive piece of legislation to govern the collection, processing and use of personal data. There are significant ramifications for domestic and foreign businesses. Impacts Security inspection requirements for cross-border transfers of personal data could have considerable importance for foreign firms. The law may be used to sanction foreign firms or retaliate against foreign governments. The law aims to settle a long-running turf war between regulators, to eliminate duplicate licensing, enforcement and inspection regimes.


2021 ◽  
Vol 14 (2) ◽  
pp. 139-148
Author(s):  
Mriya Afifah Furqania ◽  
Tomy Michael

This study aims to analyze the Indonesian laws and regulations concerning the protection of intimate video makers. The research was conducted by analyzing the Pornography Law, the Information and Electronic Transaction Law, the Government Regulation on the Implementation of Electronic Transaction Systems, and the Regulation of the Minister of Information Communication on Personal Data Protection. This research found that data/documents that are made for oneself and for their own interests which are not prohibited by law and included to one of the privacy rights that must be protected by every human being and by the state. The making of this intimate video is included in the privacy rights to enjoy life and should not be contested. Activities contained in the video can range from holding hands, hugging, kissing to having sex with consent. Therefore, if there are those who oppose rights such as acquisition and distribution without consent, the owner of the personal data can file a lawsuit for damages and have a right to erase their electronic documents.Keywords: intimate video; protection; sexual lawAbstrakPenelitian ini bertujuan untuk menganalisis peraturan perundang-undangan Indonesia yang memuat tentang perlindungan terhadap pembuat video mesra. Penelitian dilakukan dengan menganalisis Undang-Undang Pornografi, Undang-Undang Informasi dan Transaksi Elektronik, Peraturan Pemerintah tentang Penyelenggaraan Sistem Transaksi Elektronik serta Peraturan Menteri Komunikasi dan Informasi tentang Perlindungan Data Pribadi. Penelitian ini menemukan bahwa data/dokumen yang dibuat untuk diri sendiri dan kepentingan sendiri bukanlah hal yang dilarang oleh undang-undang dan justru harus dilindungi baik oleh tiap manusia maupun negara. Pembuatan video mesra ini termasuk dalam hak pribadi untuk menikmati hidup dan tidak boleh diganggu gugat. Aktivitas yang termuat dalam video tersebut bisa dari bergandengan tangan, berpelukan, berciuman hingga berhubungan badan yang dilakukan atas persetujuan. Oleh sebab itu jika terdapat pelanggaran terhadap hak seperti perolehan dan penyebarluasan tanpa persetujuan, pemilik data pribadi dapat mengajukan gugatan kerugian dan mengajukan permohonan untuk menghapus data tersebut.


2021 ◽  
Vol 4 (1) ◽  
pp. 25-37
Author(s):  
Zaid Zaid

This article aims to determine the role and responsibility of the government in protecting personal data of all individuals, studied through normative research methods with a statutory and conceptual approach. The results of this study ultimately outlines what must be done by the government by forming law on personal data protection which guarantees its determination, implementation and supervision, forming its Sector Supervisory and Regulatory Agency, forming the Attorney General's Office to prepare a court that is responsive in handling personal data privacy violations.


Jurnal Hukum ◽  
2021 ◽  
Vol 37 (1) ◽  
pp. 1
Author(s):  
Giosita Kumalaratri ◽  
Yunanto Yunanto

The development of information technology in the era of globalization makes it easier for people to carry out their daily activities, apart from socializing, it can also be a channel for work. Behind the simplicity coveted by technological developments opens up loopholes related to personal data that is easily misused. Indonesia does not yet have specific laws governing the protection of personal data as a whole. So that the author will examine the urgency of the draft personal data law in Indonesia, personal data protection schemes, to the impact of the implementation of the personal data protection bill. This study uses a normative juridical research method. The results of the study point to a privacy rights protection scheme in which everyone has the right to publish personal data or the right not to publish personal data to the public. The weakness of personal data protection regulations in Indonesia that have not been specifically regulated increases the potential for crimes against the right to privacy, but the drafting of the Personal Data Protection Bill brings fresh air not only to the public but to the government sector to the international business environment.


2022 ◽  
Vol 35 (1) ◽  
pp. 101-118
Author(s):  
Miral-Sabry AlAshry

The purpose of this study is to investigate the effectiveness of the Egyptian Personal Data Protection Law No. 151 for 2020, as well as its implications for journalistic practice. More specifically, the focal point of this study was to explore how Egyptian journalists interpret the law and its implication for press freedom in Egypt. The underpinning theoretical framework was informed by the Authoritarian school of thought. Questionnaires were distributed to 199 journalists from both independent and semi-governmental representing thirteen official newspapers of Egypt, while in-depth interviews were done with (3) Editors, (4) journalists, and (3) human rights lawyers. The finding of the study indicated that the government placed restrictions on journalists by using Data Protection Law relating to the media. That law is negatively impacting journalists and media houses. It was clear from the findings that the journalists see the law as an obstacle to media independence, as it allows the government to exercise greater information control through digital policy and puts rules of regulation against journalists.


Sign in / Sign up

Export Citation Format

Share Document