A Global Roadmap to Personal Data Protection

At present, India does not have an exclusive and comprehensive data protection legislation. Certain provisions pertaining to data protection are incorporated in the Information Technology Act, 2000 (IT Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules) framed under the IT Act. Additionally, there are sector specific regulations, e.g. in relation to payment systems, telecom, healthcare etc. that stipulate certain obligations in relation to protection of personal data and information.