India: Rejected Personal Data Protection Bill including data residency obligations

On 3 August 2022, the Indian Government withdrew the Personal Data Protection Bill (2019) which had been pending in the House (Lok Sabha). The Bill included data residency obligations and the mandatory disclosure of cross-border data transfers for so-called "data fiduciary" companies. Furthermore, the Bill would have required sensitive personal data to be transferred outside India under certain circumstances but to be stored in India . Finally, the critical personal data would have been allowed only to be processed in India, unless otherwise approved by the government.