Government access to private-sector data in India

Abstract

India does not have many laws that explicitly prescribe or prohibit systematic government access to private-sector data apart from some provisions in laws such as the Information Technology Act, Prevention of Money Laundering Act, and the Epidemic Diseases Act. † Security consultants and employees of private-sector organizations impacted by such regulation who spoke under conditions of anonymity did not agree about the existence and scope of governmental access. † While some security consultants paint a picture of comprehensive and unfettered access to databases of personal information, others claim strict adherence to the letter and spirit of the law, both in terms of proactive, reactive, and systematic access to data; the truth must lie somewhere in between.