The revised data protection framework will be tabled during the budget session in the Parliament in February next year, the government said in a statement. The development comes months after the government withdrew the contentious data protection bill, 2021, stating that a new bill will be introduced soon.

“The data protection is very critical, and the Data Protection framework is now formulated, and yet to be put up for public comments. Once we receive the comments then it will be tabled during the Budget session in the Parliament, early next year,” says Lt Gen (Dr) Rajesh Pant, national cyber security coordinator and special secretary to the Government of India.

“We have now proposed a new National Cyber Security Strategy 2022 with a vision to ensure a safe, secure, trusted, resilient and vibrant cyberspace for India’s prosperity. It rests on three pillars of secure, strengthen and synergize in the existing environment and create an eco-system of safe cyberspace,” he adds.

This comes months after Rajeev Chandrashekhar, minister of state for IT while withdrawing the data protection bill in August, said that the bill will be replaced by a comprehensive framework of Global std laws including digital privacy laws will be introduced soon.

“Security is an important pillar in Digital India itself. Data is important and it is equally important who is handling the data. Trust is important to need open, safe, secure and trusted internet which will help the digital economy to reach $1 trillion mark,” says Sanjay Bahl, director-general, (CERT-In).

What did the data protection bill say?

The data protection bill which was first introduced in the Parliament in 2019, aimed to tighten the scrutiny across social media platforms. The bill aimed to protect the personal data of individuals, as well as to create a framework for organisational and technical measures in the processing of data while laying down norms for social media intermediaries including regarding cross-border transfer of the data.

Why was the bill withdrawn?

The personal data protection bill, which was introduced in November 2019, aimed to protect the privacy of individuals. The bill was first drafted in 2018 by a committee headed by Justice S N Krishna. It was sent to the Joint Committee of Parliament (JPC) for discussion. The JPC after 78 sittings and almost six extensions proposed 81 amendments and 12 recommendations on December 16 last year, including hefty penalties for minor offences.

“Considering the report of the JCP, a comprehensive legal framework is being worked upon. Hence, in the circumstances, it is proposed to withdraw 'The Personal Data Protection Bill, 2019' and present a new bill that fits into the comprehensive legal framework," the government said in a statement while withdrawing the data protection bill, 2021.

Data Protection Framework

Data Protection framework to be tabled during the budget session in February