white_paper_on_data_protection_in_india_171127_final_v2
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
CHAPTER 8: INDIVIDUAL PARTICIPATION RIGHTS-1<br />
Rights: Right to C<strong>on</strong>firmati<strong>on</strong>, Right to Access, and Right to Rectificati<strong>on</strong><br />
8.1 Introducti<strong>on</strong><br />
One of the core pr<strong>in</strong>ciples of <strong>data</strong> privacy law is the ―<strong>in</strong>dividual participati<strong>on</strong> pr<strong>in</strong>ciple‖<br />
which stipulates that the ―process<strong>in</strong>g of pers<strong>on</strong>al <strong>data</strong> must be transparent to, and capable of<br />
be<strong>in</strong>g <strong>in</strong>fluenced by, the <strong>data</strong> subject‖. 554 This pr<strong>in</strong>ciple manifests itself <strong>in</strong> the form of<br />
<strong>in</strong>dividual participati<strong>on</strong> rights, which lie at the heart of <strong>data</strong> protecti<strong>on</strong> legislati<strong>on</strong> 555 and allow<br />
an <strong>in</strong>dividual to participate <strong>in</strong>, and <strong>in</strong>fluence the manner <strong>in</strong> which, their pers<strong>on</strong>al <strong>data</strong> is used<br />
by <strong>data</strong> c<strong>on</strong>trollers and other <strong>in</strong>dividuals. 556 In additi<strong>on</strong> to c<strong>on</strong>sent, they are the most direct<br />
means to provide an <strong>in</strong>dividual c<strong>on</strong>trol over her pers<strong>on</strong>al <strong>data</strong> and are regarded as <strong>on</strong>e of the<br />
most important privacy protecti<strong>on</strong> safeguards. 557<br />
(i)<br />
Orig<strong>in</strong><br />
Individual participati<strong>on</strong> forms three out of five FIPPS, which is deemed to be the bedrock of<br />
<strong>data</strong> privacy laws. 558 They are: 559<br />
a. There must be a way for an <strong>in</strong>dividual to f<strong>in</strong>d out what <strong>in</strong>formati<strong>on</strong> about him is <strong>in</strong> a<br />
record and how it is used.<br />
b. There must be a way for an <strong>in</strong>dividual to prevent <strong>in</strong>formati<strong>on</strong> about him obta<strong>in</strong>ed for<br />
<strong>on</strong>e purpose from be<strong>in</strong>g used or made available for other purposes without his c<strong>on</strong>sent.<br />
c. There must be a way for an <strong>in</strong>dividual to correct or amend a record of identifiable<br />
<strong>in</strong>formati<strong>on</strong> about him.<br />
Subsequently the OECD Guidel<strong>in</strong>es 560 which were significantly <strong>in</strong>fluenced by the FIPPS<br />
translated the <strong>in</strong>dividual participati<strong>on</strong> pr<strong>in</strong>ciple <strong>in</strong>to c<strong>on</strong>crete rights. 561 Further, a perusal of<br />
554 Lee Andrew Bygrave, ‗Data Privacy Law: An Internati<strong>on</strong>al Perspective‘ 2 (Oxford University Press, 2014).<br />
555 M<strong>in</strong>istry of Justice, UK, ‗Impact Assessment of Proposal for an EU Data Protecti<strong>on</strong> Regulati<strong>on</strong>‘ (22<br />
November 2012), available at: https://c<strong>on</strong>sult.justice.gov.uk/digital-communicati<strong>on</strong>s/<strong>data</strong>-protecti<strong>on</strong>-proposalscfe/results/eu-<strong>data</strong>-protecti<strong>on</strong>-reg-impact-assessment.pdf<br />
, (last accessed 21 October 2017).<br />
556 M<strong>in</strong>istry of Justice, UK, ‗Impact Assessment of Proposal for an EU Data Protecti<strong>on</strong> Regulati<strong>on</strong>‘ (22<br />
November 2012), available at: https://c<strong>on</strong>sult.justice.gov.uk/digital-communicati<strong>on</strong>s/<strong>data</strong>-protecti<strong>on</strong>-proposalscfe/results/eu-<strong>data</strong>-protecti<strong>on</strong>-reg-impact-assessment.pdf<br />
, (last accessed 21 October 2017).<br />
557 OECD, ‗OECD Guidel<strong>in</strong>es <strong>on</strong> the Protecti<strong>on</strong> of Privacy and Transborder Flows of Pers<strong>on</strong>al Data‘ (2013),<br />
available<br />
at:<br />
http://www.oecd.org/sti/iec<strong>on</strong>omy/oecdguidel<strong>in</strong>es<strong>on</strong>theprotecti<strong>on</strong>ofprivacyandtransborderflowsofpers<strong>on</strong>al<strong>data</strong>.ht<br />
m (last accessed 31 October 2017).<br />
558 Paul M. Schwartz, ‗Privacy and Democracy <strong>in</strong> the Cyber Space‘, 52 Vanderbilt Law Review 1609 (1999).<br />
559<br />
CIPP Guide, ‗The HEW Report: Def<strong>in</strong><strong>in</strong>g the Fair Informati<strong>on</strong> Practices‘, available at:<br />
https://www.cippguide.org/2012/08/23/the-hew-report-def<strong>in</strong><strong>in</strong>g-the-fair-<strong>in</strong>formati<strong>on</strong>-practices/, (last accessed 26<br />
October 2017).<br />
560 OECD, ‗OECD Guidel<strong>in</strong>es <strong>on</strong> the Protecti<strong>on</strong> of Privacy and Transborder Flows of Pers<strong>on</strong>al Data‘ (2013),<br />
available<br />
at:<br />
http://www.oecd.org/sti/iec<strong>on</strong>omy/oecdguidel<strong>in</strong>es<strong>on</strong>theprotecti<strong>on</strong>ofprivacyandtransborderflowsofpers<strong>on</strong>al<strong>data</strong>.ht<br />
m (last accessed 31 October 2017).<br />
122