Notify data protection rules: India can't afford a delay

Rising instances of data attacks have made it imperative that our privacy shield is quickly put in place

- SRIDHAR GANAPATHY

A few days ago, Signzy, a popular Know Your Customer (KYC) verification service used by India's top banks and fintech firms, was affected by a cyber attack that may have exposed the sensitive personal information of millions. Our lack of safeguards for data that businesses collect and process is an urgent problem waiting to be addressed. Major data breaches over the past four years include the exposure of personal and sensitive data of citizens held by the government (covid data from ICMR), airlines (Air India and Akasa), a major health insurer (Star Health), an ed-tech firm (Unacademy), financial intermediaries (JusPay and Upstox) and other consumer-facing internet firms (BigBasket and RentoMojo).

India's internet adoption continues at a blistering pace. We could have 900 million active users by 2025, with world-leading levels of app downloads and content consumption. Both the government and private sector are betting on digital channels to strengthen service delivery and reach new markets. Existing internet businesses with large customer bases are turning to ad-supported business models in pursuit of sustainability, while states use WhatsApp to facilitate citizen-centric public services.