Union Cabinet approves introduction of Personal Data Protection Bill in Parliament

Classifies passwords, financial data as ‘sensitive personal’

December 04, 2019 10:23 pm | Updated December 18, 2019 08:34 pm IST - NEW DELHI

Safety first: Data such as biometrics can be processed only with the explicit consent of the person. ap

Safety first: Data such as biometrics can be processed only with the explicit consent of the person. ap

The Union Cabinet on Wednesday approved the introduction of the Personal Data Protection Bill in Parliament, the government announced.

The draft bill, the Personal Data Protection Bill, 2018, was prepared by a high-level expert committee headed by former Supreme Court judge B.N. Srikrishna. The Bill deals with the broad guidelines on the collection, storage, and processing of personal data, the consent of individuals, penalties and compensation, and a code of conduct.


The draft Bill classifies ‘sensitive personal data’ as including passwords, financial data, health data, sex life, sexual orientation, biometric data, genetic data, transgender status, intersex status, caste or tribe, and religious or political belief or affiliation. The draft Bill says that such sensitive personal data can be processed only with the explicit consent of the person, and this consent needs to be informed, clear, and specific, as defined by the Bill itself.

Right to be forgotten

The draft bill also has a provision for the right to be forgotten, where the person “shall have the right to restrict or prevent continuing disclosure of personal data”.

There is also a provision for the central government to notify categories of personal data as critical personal data, which will then be only processed in a server or data centre located in India.

Personal data is to be stored in India, but can be processed outside with the consent of the person.

The draft Bill also specifies penalties for not following its provisions, including a penalty of ₹5 crore or 2% of turnover, whichever is higher, if no action is taken on a data leak.

The Personal Data Protection Bill will likely be introduced in Parliament during the ongoing Winter session.

Top News Today

Sign in to unlock member-only benefits!
  • Access 10 free stories every month
  • Save stories to read later
  • Access to comment on every story
  • Sign-up/manage your newsletter subscriptions with a single click
  • Get notified by email for early access to discounts & offers on our products
Sign in


Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.

We have migrated to a new commenting platform. If you are already a registered user of The Hindu and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.