People, not companies, should have control over their data: TRAI

TRAI said today that firms collecting user data don't have a right over it, and emphasised that consumers' consent is a must for obtaining it

India might be nowhere close to having its own GDPR that came into effect in EU countries just two months ago but TRAI's (Telecom Regulatory Authority of India) recent recommendations more than make up for the gaping privacy concerns in the country for now. In what can be termed as significant moves concerning privacy TRAI said today that firms collecting user data don't have a right over it, and emphasised that consumers' consent is a must for obtaining it and they should also be given the 'Right to be Forgotten'. This is first time 'Right to be Forgotten' has been given weightage by an Indian authority. It empowers users to delete past data that he may feel is unimportant or detrimental to his present position. Past data could be in terms of photographs, call records, video clippings and so on which could potentially harm the reputation of the consumer.

Terming the existing data protection framework as inadequate, TRAI in a set of recommendations to DoT said that companies should not use meta-data to identify users and should disclose any data breaches.

Stating that each user owns his/her personal data and information submitted to any entity, it said entities controlling and processing user data are "mere custodians" and all of them should be brought under a data protection framework.

The government, TRAI further said, must notify policy framework to regulate devices, operating systems, browsers and applications.

Batting for telecom consumers, TRAI said in its recommendation that users be granted the right to choice, consent and to be forgotten to safeguard privacy.

It has suggested that all entities in the digital ecosystem be brought under a data protection framework to guard against the misuse of personal data of telecom consumers.

The recommendations assume significance as issues around data protection have come into the spotlight, and privacy concerns have amplified in the wake of the recent Cambridge Analytica data breach by Facebook.

Recommending a series of measures on "privacy, security and ownership of data in telecom sector", TRAI held that consumers are owners of their data and that entities controlling, processing their information are "mere custodians and do not have primary rights over this data".

It added: "The Right to Choice, Notice, Consent, Data Portability, and Right to be Forgotten should be conferred upon the telecommunication consumers."

The regulator however has added a rider that the right to data portability and right to be forgotten are restricted rights, and the same should be subject to applicable laws in this regard.

It has suggested that till a General Data Protection law is notified by the government, the existing rules applicable to telecom operators for protection of users privacy be made applicable to all the entities in the digital ecosystem.

"For this purpose, the Government should notify the policy framework for regulation of devices, operating systems, browsers and applications," TRAI has recommended.

It said that in order to ensure sufficient choices to the users of digital services, detailing in the consent mechanism be built-in by service providers.

TRAI has suggested that all entities in the digital ecosystem including telecom operators should transparently disclose the information about the privacy breaches on their websites along with the action taken for mitigation, and preventing such breaches in future.

Trai, in its 77-page recommendations, said: "The Government should put in place a mechanism for redressal of telecommunication consumers' grievances relating to data ownership, protection, and privacy."

It has also favoured that entities getting control of data in any form should not be allowed to use "pre-ticked" boxes to gain users consent.

For more updates, subscribe to exchange4media's WhatsApp Channel-

Stay updated with the latest news in the Marketing & Advertising sector with our daily newsletter

By clicking Sign Up, I agree to the Terms of Use and Privacy Policy.