India passes the Personal Data Protection Bill, with penalties of up to $30 million for companies found in violation. ind in Violation.

 The long-awaited Digital Personal Data Protection Bill has received approval from India's upper chamber of parliament, marking a significant breakthrough in the nation's data privacy landscape. The Digital Personal Data Protection Bill, 2023 (DPDP Bill) was approved by the Rajya Sabha on Wednesday with a voice vote, notwithstanding the opposition leaders' decision to abstain. The bill will become a law once President Draupadi Murmu gives her approval.

This occurs only a few days after the Lok Sabha gave the bill the all-clear on Monday, August 7, following a number of protests from MPs and opposition figures. Ashwini Vaishnaw, the Indian IT Minister, describes the bill as "pro-citizen and pro-privacy," highlighting its function in protecting people' data and adding that it is, "This bill is very much in the spirit of the government, where we would like to ensure that every citizen’s data is fully protected," he announced, adding that the Center undertook extensive public consultation, taking input from 48 organizations, consulting with over three dozen ministries, and considering more than 24,000 comments during the preparation of the bill.

Once the bill becomes law, it will establish a strong framework for the protection of personal data of Indian users in the digital realm, limiting cross-border data transfers and imposing penalties on companies for breaches in data security. Furthermore, it has the potential to significantly bolster the privacy rights of Indian citizens. The bill’s framework aims to provide individuals with greater control over their personal data, enabling them to dictate how it is collected, processed, and stored by tech companies. This could lead to heightened transparency and empowerment for users in their digital interactions.

To add to this, it gives the Center more powers to exercise their oversight in the matter and even suppress public access to certain information if it is deemed to be in the public's interest. Understandably, this has raised concerns about heightened surveillance and the potential misuse of citizens’ data for state purposes. For starters, the Editors Guild of India claimed that it affects press freedom and weakens the right of citizens to information. Another criticism came from the digital rights group Internet Freedom Foundation, which said that there are insufficient protections against "over-broad surveillance."

However, the Digital Personal Data Protection Bill, 2023, which aims to strengthen data protection and privacy laws in India's digital space, is already proving to be a significant piece of legislation. The law addresses worries about data usage by online platforms and suggests fines of up to 2.5 billion ($30 million) in the event that tech businesses violate it and fail to comply. The bill is notable for giving the Indian government the authority to exclude state entities from certain legal requirements. Additionally, it defines citizens' rights to amend or delete