Recently the government released draft rules under the Right to Information Act for consultation before it finalised them.  This process of public consultation on draft rules is a welcome step which is not often followed. Many Acts passed by Parliament 'delegate' the power to make rules and regulations to the executive (government and regulatory bodies such as RBI and TRAI).  The reason is that these rules may need to be changed at frequent intervals (such as, say specifications on food labels), and may not need the time and expense required for amendment to the Act by Parliament.  However, Parliament retains for itself the power to examine these rules.  Most Acts passed by Parliament provide that rules framed under them will be laid before the Parliament.  Any Member of Parliament may demand a discussion on the rules and a vote to modify or nullify them. In practice, a large number of rules are laid before Parliament, making it very difficult for Parliamentarians to examine them effectively.  In the last session of Parliament, more than 1500 documents were laid before Parliament.  No discussion on specific rules has taken place in Parliament in the 14th and 15th Lok Sabha (2004-10). Both the Lok Sabha and Rajya Sabha also have Committees on Subordinate Legislation to examine these rules.  Out of 1515 rules, regulations, circulars and schemes laid before Lok Sabha between 2008 and 2010, the Committee has examined 44 documents.  This amounts to only 3% of the afore-mentioned documents laid before the Lok Sabha. It is important that Parliament oversee the power to make rules that it has delegated to the government.  For that, it needs to invest in strengthening the research staff of the committee on subordinate legislation as well as provide research stafff to MPs.

The government has given itself the “master key” to access major consumer databases maintained by companies in different sectors. Under new regulations made under the Information Technology Act, government can ask companies to share sensitive personal information about their customers. Sensitive personal information would cover medical records and history, information about physical, physiological and mental health, sexual orientation, credit and debit cards, biometric information and passwords. Under the new rules any government agency required under law to obtain information for the purpose of verifying identity, or for prevention, detection, investigation, prosecution, and punishment of offences can ask a company to give sensitive personal information held by it about an individual. There are no checks on this power, except that the request for information be made in writing, and stating clearly the reason for seeking the information.  Usually information requests have certain inbuilt checks.  For example, search warrants in criminal cases are issued by a court.  Tapping of telephones or interception of electronic communication can only be authorised by the Union or the State Home Secretary after following a prescribed process.  The new Bill for Unique Identification Number (UID) permits such use only by the order of a court, or for national security (by an order of an authorised officer of at least Joint Secretary rank in the central government).