Increase Diversity, Participation And Transparency In Consultation Process: Academicians And Advocates Write To Justice Srikrishna Committee [Read Letter]

A group of 24 legal academicians and advocates have written to the Justice Srikrishna Committee of Experts on Data Protection, advocating for a citizen centric data protection law and making several suggestions to achieve this objective.The group has also demanded that the consultation process be made more inclusive, claiming that the white paper released by the Committee failed to set out the bigger picture on data protection due to lack of a public consultation on key principles of a data protection legislation.They have further raised concerns on the electronic participation mechanism designed by MeitY, in which people are expected to respond to 233 questions in individual form fields on MyGov.in. They explain, "Answering two hundred and thirty three questions is manually exhausting and unnecessarily arduous. This approach will limit participation to well resourced organizations with full-time employees focused on such tasks, and disproportionately increase the representation of commercial and private industry players to the detriment of the representation of other stakeholders and the wider spectrum of Indian citizenry."Moreover, they contend that the Committee must release information on its proceedings, meeting notes and draft bill, as well as the comments received by it. This is in view of the fact that the National Campaign for People’s Right to Information had been denied this information under the Right to Information Act.The memorandum has been submitted by Anup Surendranath, Apar Gupta, Chinmay Kanojia, Gautam Bhatia, Jawahar Raja, Karan Lahiri, Kotla Harshvardhan, Kritika Bhardwaj, Mariyam Kamil, Maansi Verma, Mihira Sood, Ninni Susan Thomas, Paras Nath Singh, Prasanna S., Raghav Shankar, Rahul Narayan, Raman Jit Singh Chima, Sai Vinod, Shadan Farasat, Suhrith Parthasarathy, Tanvi NS, Ujwala Uppaluri, Vrinda Bhandari and Saurabh Bhattacharjee. They have also made the following recommendations: Individual rights are at the center of privacy and data protectionThey assert that individual autonomy, dignity, and self-determination constitute the heart and soul of the Indian Constitution and submit, "...the Data Protection Law must not articulate and tackle the central problem as achieving an acceptable trade-off between “innovation” and “data protection”, but as achieving a legislative and regulatory framework which harnesses innovation in order to facilitate individual autonomy, dignity, and self-determination. Adopt a principle based approachThey advocate for adoption of the core principles of privacy and data protection as articulated by report of the Justice A.P. Shah Committee of Experts, and also incorporate the developments brought about by the recent Supreme Court judgment in the case of Justice Puttaswamy v. Union of India.They further demand, "Exceptions should remain exceptions and should not swallow up the rule. Any exceptions to the privacy principles should be: (a) exceptions brought about through a clearly worded legal instrument, (b) narrowly tailored exceptions that proceed from an analysis of the necessity of the exemption, (c) the necessity and proportionality of these exemptions (in their creation and practical operation) must be closely connected to the aim for which they are created; and (d) exceptions must be accompanied by sufficient procedural safeguards for the preservation of individuals’ rights and of accountability to the regulator." Create an empowered, independent regulator to enforce the privacy principlesThey suggest a structure for the office of a privacy commissioner, asserting that such Commission should have powers of investigation, adjudication and enforcement. They explain, "These include the power to impose penalties in the nature of fines and also the power to file criminal complaints for willful non-compliance of the rules and regulations made by the Privacy Commission to build deterrence." Aadhaar conflicts with privacy protections and any version of a citizen centric data protection lawThe Committee, they suggest, should examine Aadhaar, asserting, "We support the use of digital technologies for public benefit. However, they should not be privileged over fundamental rights. Any digital identity scheme should be framed around the protection of individual rights through a data protection legislation, rather than a data protection legislation being framed to presumptively accommodate and work around an existing program such as Aadhaar."They further recommend that the Privacy Commission should have overriding power and superintendence over the Unique Identification Authority of India (UIDAI). They say that the UIDAI being a data controller and a data protection authority for Aadhaar data at the same time creates a "conflict of interest". An effective, citizen friendly adjudicatory system In addition to enabling people to make complaints to the Privacy Commission, they request that the remedy of approaching civil courts and filing police...

Increase Diversity, Participation And Transparency In Consultation Process: Academicians And Advocates Write To Justice Srikrishna Committee [Read Letter]

Apoorva Mandhani

Tags