IDEAS home Printed from https://ideas.repec.org/h/spr/perchp/978-981-97-9983-1_11.html
   My bibliography  Save this book chapter

India’s Legal and Policy Approach to Personal Data Protection and Cross-Border Data Transfer: A Critical Study with Special Reference to Health Data

In: International Transfers of Health Data

Author

Listed:
  • Kshitij Kumar Singh

    (University of Delhi
    University of Copenhagen)

Abstract

IndiaIndia recognises the privacy and security risks and the business and innovation needs of the digital age in its digital personal data protection law, the Digital Personal Data Protection Act, 2023 (DPDPA)Digital Personal Data Protection Act, 2023. It duly recognises the rights and duties of the Data Principal but needs to include a few of the rights compared to the European General Data Protection Regulation (GDPR). It prescribes obligations for the Data FiduciariesData fiduciaries and categorises them into Significant Data FiduciariesData fiduciaries with additional obligations. The DPDPA does not categorise personal data into sensitive personal data, including health data. It applies equally to sensitive and non-sensitive personal data, except if it comes under the subject matter reserved for the Significant Data FiduciariesData fiduciaries. The DPDPA generally allows the cross-border transfer of digital personal data except those countries restricted by the Central Government. It allows data localisation to sectoral laws such as banking and insurance, which provide enhanced protection for digital personal data. The DPDPA also recognises exemptions that confer relatively wide powers to government with some encouraging provisions for research and innovation and start-ups. However, it leaves uncertainties and gaps that may be supplemented by the prospective rules. Though the sensitive nature and distinct requirement of health data has been recognised through legal and policy initiatives for digital health (e.g., DISHA), that may result in specific protection for digital health data.

Suggested Citation

  • Kshitij Kumar Singh, 2024. "India’s Legal and Policy Approach to Personal Data Protection and Cross-Border Data Transfer: A Critical Study with Special Reference to Health Data," Perspectives in Law, Business and Innovation, in: Marcelo Corrales Compagnucci & Mark Fenwick (ed.), International Transfers of Health Data, pages 219-238, Springer.
    • Handle: RePEc:spr:perchp:978-981-97-9983-1_11
    DOI: 10.1007/978-981-97-9983-1_11
    as

    Download full text from publisher

    To our knowledge, this item is not available for download. To find whether it is available, there are three options:
    1. Check below whether another version of this item is available online.
    2. Check on the provider's web page whether it is in fact available.
    3. Perform a search for a similarly titled item that would be available.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:perchp:978-981-97-9983-1_11. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.