Q2.Data security has assumed significant importance in the digitised world due to rising cyber crimes. The Justice B. N. Srikrishna Committee Report addresses issues related to data security. What, in your view, are the strengths and weaknesses of the Report relating to the protection of personal data in cyberspace?

In an increasingly digitised world, data security has become paramount due to the proliferation of cyber crimes. The Justice B. N. Srikrishna Committee Report, submitted in 2018, was a pivotal step towards establishing a robust legal framework for personal data protection in India, aiming to safeguard individual privacy.

• Comprehensive Framework: Proposed India's first holistic data protection law, defining personal data and establishing principles for processing.
• Emphasis on Consent and Rights: Advocated for explicit, informed consent and enshrined data principal rights like access, correction, and portability.
• Data Fiduciary Obligations: Delineated clear responsibilities and accountability for data fiduciaries in handling personal data.
• Independent Data Protection Authority (DPA): Recommended an independent DPA to enforce the law, investigate breaches, and promote awareness.

• Broad Government Exemptions: Criticized for wide-ranging exemptions to government agencies for processing personal data without consent, citing national security and public order, potentially enabling state surveillance.
• Mandatory Data Localization: Requirement to store a copy of all personal data within India raised concerns about increased costs for businesses and potential trade barriers.
• Balance of Power: Debated over its perceived imbalance between individual privacy rights and state surveillance powers, with critics arguing insufficient checks against state overreach.

The Srikrishna Committee Report laid a crucial foundation for India's data protection journey. However, addressing its identified weaknesses, particularly by refining government exemptions and ensuring a stronger balance between state interests and individual privacy, is essential for a truly effective data protection regime.