white_paper_on_data_protection_in_india_171127_final_v2
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
obligati<strong>on</strong>s like seek<strong>in</strong>g fresh c<strong>on</strong>sent for pers<strong>on</strong>al <strong>data</strong> that has been collected, used,<br />
disclosed, reta<strong>in</strong>ed or stored prior to the enactment of the law will be difficult to comply with.<br />
The <strong>in</strong>ternati<strong>on</strong>al experience <strong>in</strong> this regard is <strong>in</strong>structive. In South Africa, it is not clear<br />
whether the POPI Act has retrospective applicati<strong>on</strong>. This is because Secti<strong>on</strong> 114(1) of the<br />
POPI Act states that ―All process<strong>in</strong>g of pers<strong>on</strong>al <strong>in</strong>formati<strong>on</strong> must with<strong>in</strong> <strong>on</strong>e year after the<br />
commencement of this secti<strong>on</strong> be made to c<strong>on</strong>form to this Act.‖ However, it appears that there<br />
is legal c<strong>on</strong>sensus <strong>on</strong> the issue that the POPI Act does not have retrospective applicati<strong>on</strong>. 206<br />
Further, <strong>in</strong> Canada, where it is not explicitly clear from a read<strong>in</strong>g of PIPEDA whether it<br />
applies retrospectively, the prevalent view is that it does not have retrospective applicati<strong>on</strong>. 207<br />
The implicati<strong>on</strong> of this is that PIPEDA be<strong>in</strong>g c<strong>on</strong>sent centric, it was not necessary for<br />
organisati<strong>on</strong>s to obta<strong>in</strong> c<strong>on</strong>sent for collecti<strong>on</strong> of pre-PIPEDA <strong>in</strong>formati<strong>on</strong>. However, future<br />
use and disclosure of <strong>data</strong> will be regulated by the PIPEDA. 208<br />
2.4 Provisi<strong>on</strong>al Views<br />
1. Given prevalent best practices, the law may apply to natural pers<strong>on</strong>s <strong>on</strong>ly. The primary<br />
object of the legislati<strong>on</strong> be<strong>in</strong>g to protect the <strong>in</strong>formati<strong>on</strong>al privacy right of an <strong>in</strong>dividual,<br />
the proposed law may not be extended to <strong>in</strong>clude <strong>data</strong> relat<strong>in</strong>g to companies and other<br />
juristic entities.<br />
2. The law may apply to <strong>data</strong> about natural pers<strong>on</strong>s processed both by public and private<br />
entities. However, limited exempti<strong>on</strong>s may be c<strong>on</strong>sidered for well def<strong>in</strong>ed categories of<br />
public or private sector entities.<br />
3. The law may have a transitory provisi<strong>on</strong> to address the issue of retrospective<br />
applicati<strong>on</strong>.<br />
2.5 Questi<strong>on</strong>s<br />
1. What are your views <strong>on</strong> the issues relat<strong>in</strong>g to applicability of a <strong>data</strong> protecti<strong>on</strong> law <strong>in</strong><br />
India <strong>in</strong> relati<strong>on</strong> to (i) natural/juristic pers<strong>on</strong>s; (ii) public and private sector; and (iii)<br />
retrospective applicati<strong>on</strong> of such law?<br />
2. Should the law seek to protect <strong>data</strong> relat<strong>in</strong>g to juristic pers<strong>on</strong>s <strong>in</strong> additi<strong>on</strong> to protect<strong>in</strong>g<br />
pers<strong>on</strong>al <strong>data</strong> relat<strong>in</strong>g to <strong>in</strong>dividuals?<br />
Alternatives:<br />
206 Russel Luck, ‗POPI - is South Africa keep<strong>in</strong>g up with <strong>in</strong>ternati<strong>on</strong>al trends?‘ 84(44) De Rebus (May 2014) ,<br />
available at: http://www.saflii.org/za/journals/DEREBUS/2014/84.html, (last accessed 28 October 2017).<br />
207 ‗Compliance with the Pers<strong>on</strong>al Informati<strong>on</strong> Protecti<strong>on</strong> and Electr<strong>on</strong>ic Documents Act‘, Aylesworth LLP,<br />
available at: http://documents.jdsupra.com/4217f03e-a265-4711-a230-103d2a5f3140.pdf, (last accessed 28<br />
October 2017).<br />
208 ‗Compliance with the Pers<strong>on</strong>al Informati<strong>on</strong> Protecti<strong>on</strong> and Electr<strong>on</strong>ic Documents Act‘, Aylesworth LLP,<br />
available at: http://documents.jdsupra.com/4217f03e-a265-4711-a230-103d2a5f3140.pdf, (last accessed 28<br />
October 2017).<br />
32