Personal Data Protection Bill, 2019
AI / PRIVACY / CYBER RELEVANCE
Important for tracing earlier Indian approaches to high-risk automated/data- intensive processing.
AI: ModeratePrivacy: HighCybersecurity: High
READ FIRST
- Clauses 4 - 31, particularly purpose/collection limits, privacy by design, security, DPIA and audits
PURVIEW
Sets out the 2019 proposed personal-data protection regime that preceded the DPDP Act. Its purview was broad: lawful processing, consent, purpose limitation, data minimisation, storage limitation, rights, data fiduciary obligations, security safeguards, breach notification, sensitive or critical personal data, cross-border transfers, regulatory oversight and penalties. For AI, the Bill is particularly useful for studying how India previously contemplated stronger concepts of accountability, categorisation and localisation in a framework that would have governed data-intensive technologies and automated processing at scale.
Classification and legal status. Historical bill; not enacted law.