Legal Framework


– Personal Data Protection Bill, 2018,2018.pdf

– Justice Srikrishna Committee Report (Data Protection Committee Report)

Key Points of the Report: Rohan Venkataramakrishnan, (Jul 28, 2018 · 06:30 am) Explainer: All you need to know about the Srikrishna panel’s draft data protection law,

Key points from Case Justice K.S. Puttaswamy (Retd.) v. Union of  India: Nishith Desai Associates –

– White Paper on Data Protection Framework for India – Consultation paper on the framework of data protection that should be followed in India.

  • Relevant discussions include: What is Personal Data?; Cross-border flow of Data; Consent & Minor consent; personal sensitive data; participation rights; right to be forgotten; enforcement; regulation; and Data Protection Authority.

Non-Personal Data Governance Framework – Report by Committee of Experts Chaired by Shri. Kris Gopalakrishnan. Read the report published by Meity at 

Relevant discussions include: An explainer on the Non Personal Data Framework Report- 

Note: This report is subject to change following the consultation period.

Data Empowerment & Privacy Architecture Framework (DEPA) – A new data framework proposed by Niti Ayog to introduce new consent institutions along with other changes in the data sharing paradigm to empower citizens and promote innovation.

National Digital Health Mission (NDHM) – A draft policy to proposing to introduce a digital healthcare ecosystem by disrupting the existing healthcare industry in India with digitization. Read the draft policy here – 

Indian Case Law Evolution

– Tracing the roots of privacy through Indian constitution. An early look – This paper takes a look at how the right to privacy has evolved in the Indian jurisprudence through cases.

– Privacy and The Indian Supreme Court: A list of all cases.:

European Union

EU Charter of Fundamental Rights Article 8 provides for the ‘Protection of Personal Data’

General Data Protection Regulation (“GDPR”) is a regulation on Data Protection in the EU. It replaced the earlier regulation Data Protection Directive 95/46/EC.


Recently a new data protection law was passed in Brazil along the lines of GDPR,