Privacy

The Indian government’s recent mandate to link Aadhaar numbers with tax returns and mobile numbers highlights the urgent need for a privacy law. Current proposals suggest a law based on OECD principles, emphasizing consent. However, given the complexity of data use today, the responsibility should shift from individual consent to holding data controllers accountable, ensuring fair and non-discriminatory data processing. India has the chance to create a forward-thinking privacy framework suitable for today’s data-intensive world.

2016 was a transformative year, marked by the e-commerce sector’s challenges following the Indian government’s Press Note 3. This led to innovative business models and growth in related industries like logistics and warehousing. The year also saw Aadhaar enrolment surpass 1 billion, laying the foundation for India’s digital transformation. The introduction of India Stack, particularly the Unified Payment Interface (UPI), revolutionized digital payments. However, the focus shifted towards including the larger, underserved population in the digital economy, highlighting the need for a balanced policy framework that respects privacy while leveraging data-driven decision-making.

Privacy is an aberration from the mutual surveillance (coveillance) society that we have always been a part of. With greater tensions being felt between new technologies and the need for greater privacy the solution is to embrace covaillance so that we can reduce the information asymmetry between the watcher and the watched.

Wearable devices are increasingly common, tracking various physical activities and even finding their way into legal evidence. The future of medicine may lie in this quantified personal measurement, allowing for customized treatment tailored to individual patients. However, to reach this future, changes to regulatory frameworks and a rethinking of privacy notions are needed to allow for more patient-centric medical treatment and algorithmic diagnosis.

India has the potential to use data innovatively for enhancing healthcare outcomes. However, it’s crucial to balance patient privacy with public good, defining clear grounds for data access and stringent punishments for misuse. The draft EHR legislation suggests patients “own” their medical data, but a nuanced approach focusing on access and control is needed. India has a unique opportunity to leverage technology for healthcare, but must strike the right balance between personal privacy and public good.

The consent-based model of data protection is outdated and ineffective in the modern, interconnected world. We need to shift from focusing on obtaining consent to holding organizations accountable for the data they control. India, lacking a formal privacy law, has a unique opportunity to develop a modern privacy law centered on accountability, which could serve as a model for the rest of the world.

While it is not without its flaws, a closer examination of the provisions of the Aadhaar Act will make it clear that it imposes on the government, some of the strongest fetters on executive over-reach of any legislation in the country.