The draft of Personal Data Protection Bill is available on the official website of Information Technology. As per the draft, information on username, password, bank account, credit card, bio-metric data, mental health, medical records and beliefs will be preserved, no one will be able to use the personal information of any person for commercial purposes, according to the documents, a personal data protection authority of seven persons will be set up in the Ministry of IT, Ministry of Defense, Ministry of Interior and Ministry of Information Technology and Telecommunication for data protection.
The authority will also set up a data controller and data processor licensing framework, and the government will also set up a “Personal Data Protection Fund” to run the affairs of the authority. Violation of the Protection Act will result in a fine of Rs 1.5 crore, while theft of personal information more than once will result in a fine of Rs 250 crore.
Stakeholder suggestions have also been sought in this regard. Stakeholders may submit their suggestions by email by May 15th.