As United Nations member states negotiate a treaty to counter cybercrimes, India has made suggestions at the international forum that transfer of “personal data” under the convention will be done in accordance with the country’s domestics laws and not other applicable international laws.
The Digital Personal Data Protection Act enacted by the Parliament in August says that personal data can be processed “in the interest of sovereignty and integrity of India or security of the state” for “fulfilling any obligation under law”.
The Act that came into force on August 12 after receiving assent from the President of India requires firms to disclose to users the identity of other firms to which their data would be entrusted for processing, but they are explicitly exempted from disclosing or sharing of such data in the case of lawful interception of data.
