white_paper_on_data_protection_in_india_171127_final_v2
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
In Ind<strong>on</strong>esia, the regulati<strong>on</strong> regard<strong>in</strong>g the Provisi<strong>on</strong> of Electr<strong>on</strong>ic System and Transacti<strong>on</strong>s 384<br />
mandates the local storage of <strong>data</strong> relat<strong>in</strong>g to electr<strong>on</strong>ic system operators for public service.<br />
Further, Regulati<strong>on</strong> 20/2016 <strong>on</strong> Pers<strong>on</strong>al Data Protecti<strong>on</strong> <strong>in</strong> Electr<strong>on</strong>ic System provides that<br />
electr<strong>on</strong>ic system providers are required to process protected private <strong>data</strong> <strong>on</strong>ly <strong>in</strong> <strong>data</strong> centers<br />
and disaster recovery centers located <strong>in</strong> Ind<strong>on</strong>esia. 385<br />
9.5 Provisi<strong>on</strong>al Views<br />
From these practices it emerges that certa<strong>in</strong> countries have embraced <strong>data</strong> localisati<strong>on</strong> <strong>in</strong><br />
some form or manner. However, most countries, do not have a <strong>data</strong> localisati<strong>on</strong> mandate.<br />
India will have to carefully balance the enforcement benefits of <strong>data</strong> localisati<strong>on</strong> with the<br />
costs <strong>in</strong>volved pursuant to such requirement. Different types of <strong>data</strong> will have to be treated<br />
differently, given their significance for enforcement and <strong>in</strong>dustry. It appears that a <strong>on</strong>e-sizefits-all<br />
model may not be the most appropriate. Thus while <strong>data</strong> localisati<strong>on</strong> may be<br />
c<strong>on</strong>sidered <strong>in</strong> certa<strong>in</strong> sensitive sectors, it may not be advisable to prescribe it across the board.<br />
9.6 Questi<strong>on</strong>s<br />
1. What are your views <strong>on</strong> <strong>data</strong> localisati<strong>on</strong>?<br />
2. Should there be a <strong>data</strong> localisati<strong>on</strong> requirement for the storage of pers<strong>on</strong>al <strong>data</strong> with<strong>in</strong><br />
the jurisdicti<strong>on</strong> of India?<br />
3. If yes, what should be the scope of the localisati<strong>on</strong> mandate? Should it <strong>in</strong>clude all<br />
pers<strong>on</strong>al <strong>in</strong>formati<strong>on</strong> or <strong>on</strong>ly sensitive pers<strong>on</strong>al <strong>in</strong>formati<strong>on</strong>?<br />
4. If the <strong>data</strong> protecti<strong>on</strong> law calls for localisati<strong>on</strong>, what would be impact <strong>on</strong> <strong>in</strong>dustry and<br />
other sectors?<br />
5. Are there any other issues or c<strong>on</strong>cerns regard<strong>in</strong>g <strong>data</strong> localisati<strong>on</strong> which have not been<br />
c<strong>on</strong>sidered above?<br />
384 Regulati<strong>on</strong> (20/2016) <strong>on</strong> Pers<strong>on</strong>al Data Protecti<strong>on</strong> <strong>in</strong> Electr<strong>on</strong>ic Systems.<br />
385 Baker McKenzie, ‗Ind<strong>on</strong>esia: New Regulati<strong>on</strong> <strong>on</strong> Pers<strong>on</strong>al Data Protecti<strong>on</strong>‘ (3 January 2017), available at:<br />
http://www.bakermckenzie.com/en/<strong>in</strong>sight/publicati<strong>on</strong>s/2016/12/new-implement<strong>in</strong>g-regulati<strong>on</strong>-pers<strong>on</strong>al-<strong>data</strong>/,<br />
(last accessed 10 November 2017).<br />
75