India: Opened consultation on Digital Personal Data Protection Bill 2022 including cybersecurity requirements

On 18 November 2022, India's Ministry of Electronics and Information Technology (MeitY) opened a public consultation on its draft of The Digital Personal Data Protection (DPDP) Bill 2022, which will close on 2 January 2023. The Ministry of Electronics and Information Technology (MeitY) extended the deadline for submitting comments from 17 December 2022 to 2 January 2023. The Bill would amend the Information Technology Act of 2000 and the Right to Information Act of 2005 and would apply to data collected online and data collected offline then digitized within Indian territory, as well as data collected outside the country if they show correlations with Indian individuals. The Bill would impose a general duty on data fiduciaries and processors to take reasonable security safeguards to prevent personal data breaches.