The Personal Data Protection Bill, 2019 was recently introduced in Parliament. The Bill has been referred to a Joint Parliamentary Committee for detailed examination, and the Committee is expected to submit its report by the last week of Budget Session, 2020. The Bill seeks to provide for the protection of personal data of individuals (known as data principals), and creates a framework for processing such personal data by other entities (known as data fiduciaries). It provides the data principal with certain rights with respect to their data, such as seeking correction, completion or transfer of their data to other fiduciaries. Similarly, it sets out certain obligations, and other transparency and accountability measures to be undertaken by the data fiduciary, such as instituting grievance redressal mechanisms to address complaints of individuals. Processing of personal data is exempted from the provisions of the Bill in certain cases, such as security of state, public order, or for prevention, investigation, or prosecution of any offence. The Bill also establishes a Data Protection Authority to ensure compliance with the provisions of the Bill and provide for further regulations.
As per the Statement of Objects and Reasons of the 2019 Bill, the provisions of the Bill are based on the recommendations of the report of the Expert Committee (Chair: Justice B. N. Srikrishna) which examined issues related to protection of personal data and proposed a Draft Personal Data Protection Bill, 2018.
In a previous blog, we provided a brief background to the 2019 Bill, explained why a Bill was brought for personal data protection and what are some of the key provisions of the Bill. In this blog, we look at how the 2019 Bill differs from the 2018 Draft Bill.
Table 1: Comparison of the provisions of the 2018 Draft Bill with the 2019 Bill
Provision |
Draft Personal Data Protection Bill, 2018 |
Personal Data Protection Bill, 2019 |
Definition of personal data |
|
|
Sensitive personal data |
|
|
Rights of individual (data principal) |
|
|
Non-consensual processing of personal data |
|
|
Social media intermediaries |
|
|
Exemptions for the government for processing of personal data |
|
|
Exemptions for manual processing by small entities |
|
|
Transfer of personal data outside country |
|
|
Composition of Data Protection Authority of India |
|
|
Offences and penalties |
|
|
Non-personal and anonymised personal data |
|
|
Sources: The Draft Personal Data Protection Bill, 2018; The Personal Data Protection Bill, 2019; PRS.
In July, a Committee set up by the Ministry of Finance to study issues related to virtual currencies, submitted its report. The Committee recommended that all private cryptocurrencies should be banned in India. Correspondingly, the Committee proposed a draft Bill banning cryptocurrency in the country. In this blog, we explain cryptocurrencies and how they are used, recommendations of the Committee with respect to cryptocurrencies and the regulatory framework for cryptocurrencies in India and other countries.
What are virtual currencies and what is their use?
Virtual currency is a digitally tradable form of value, which can be used as a medium of exchange, or a stored value which can be utilised later. It does not have the status of a legal tender. A legal tender is guaranteed by the central government and all parties are legally bound to accept it as a mode of payment.
Cryptocurrency is a specific type of virtual currency, which is decentralised and protected by cryptographic encryption techniques. Bitcoin, Ethereum, Ripple are a few notable examples of cryptocurrencies. Decentralisation implies that there is no central authority where records of transactions are maintained. Instead, anyone can create a transaction. This transaction data is recorded and shared across multiple distributor networks, through independent computers as shown in Figure 1. This technology is known as Distributed Ledger Technology.
Figure 1: Distributed Ledger Technology
The Committee noted that there are two principal ways in which cryptocurrencies are raising money. First, through Initial Coin Offerings, where digital tokens are issued in exchange for other currencies. Second, through using it as a means of exchange or a payment system. As of February 2019, there were more than 2,000 cryptocurrencies across the world, with a market capitalisation of approximately USD 120 billion.
Why has the Committee recommended banning of cryptocurrencies?
The Committee noted various regulatory concerns around virtual currencies, and cryptocurrencies in particular. These include:
Fluctuation in prices: Cryptocurrencies are subjected to market fluctuations and the lack of a centralised authority makes it difficult to regulate them. For instance, in December 2017, the value of Bitcoin cryptocurrency was around USD 20,000 per coin, which reduced to USD 3,800 per coin by November 2018. The Ministry of Finance, in a press statement, noted that the price of virtual currencies is a matter of mere speculation resulting in spurt and volatility in their prices.
Risk to consumers: The Committee also noted that there are several vulnerabilities in the design of cryptocurrencies which leave consumers open to risk of fraud. These include phishing cyber-attacks and ponzi schemes. For instance, a Rs 2,000 crore ponzi scheme was unveiled in April 2018. Further, cryptocurrency transactions are irreversible, which means once a transaction is done, there is no way to remedy it.
Impact on power consumption: The Committee also observed that cryptocurrencies can have unfavourable consequences on India’s energy demand. Validating transactions in a distributed network involves high electricity consumption and requires high computation power. The Committee noted a study which estimated that 19 households in USA can be powered for one day by the electricity consumed in a single transaction of bitcoin cryptocurrency.
Potential use for criminal activity: The Financial Action Task Force, an intergovernmental organisation to combat money laundering, in its report (2014) observed that virtual currencies provide greater anonymity than traditional payment methods. This makes them more vulnerable to money-laundering and illicit funding for terror financing. The Committee noted that the decentralised nature and the anonymity which cryptocurrencies provide makes it difficult for law enforcement authorities to track down people involved in illicit activities.
Is there any country which has permitted use of cryptocurrencies?
Different countries have adopted different regulatory frameworks with respect to cryptocurrencies. Some countries have permitted the use of cryptocurrencies as a payment system while there is a complete ban on cryptocurrencies in some others. Note that no country has allowed use of any virtual currency as legal tender.
Table 1: Regulatory framework for cryptocurrencies in different countries
Country |
Regulatory Framework |
Canada |
Permitted as a payment system and as a form of investment, income from it is taxed |
Switzerland |
Permitted as a payment system (including consumer to government transactions) and as a form of investment |
Japan |
Permitted and regulated as a payment system |
China |
Use of cryptocurrency is banned for all purposes |
What are the present regulations in India with respect to cryptocurrencies?
In the last few years, the Reserve Bank of India (RBI) has notified the potential financial, operational, legal and security risks related to cryptocurrencies on multiple occasions (December 2013, February 2017 and December 2017). In December 2017, the Ministry of Finance issued a statement which clarified that virtual currencies are not legal tender and do not have any regulatory permission or protection in India. Further, the investors and participants dealing with them are doing so entirely at their risk and should best avoid participating. In the 2018-19 budget speech, the Finance Minister announced that the government does not consider cryptocurrencies as legal tender and will take all measures to eliminate their use in financing illegitimate activities or as a part of payment system. In April 2018, RBI notified that entities regulated by it should not deal in virtual currencies or provide services for facilitating any person or entity in dealing with or settling virtual currencies.
How does the draft Bill proposed by the Committee change these regulations?
Currently, only the entities regulated by the central bank are prohibited from dealing in, or providing services for dealing in virtual currencies. The draft Bill prohibits any form of mining (creating cryptocurrency), issuing, buying, holding, selling or dealing in cryptocurrency in the country. Further, it provides that cryptocurrency should not be used as legal tender or currency in India. The Bill allows for the use of technology or processes underlying cryptocurrency for the purpose of experiment, research or teaching.
The Bill also provides for offences and punishments for the contravention of its provisions. For instance, it states that mining, holding, selling, issuing or using cryptocurrency is punishable with a fine, or imprisonment up to 10 years, or both. For individuals who might be in possession of cryptocurrencies, the Bill provides for a transition period of 90 days from the commencement of the Act, during which a person may dispose of any cryptocurrency in their possession, as per the notified rules.
Are there any areas where the Committee recommended use of cryptocurrencies?
According to the Committee, while cryptocurrencies or virtual currencies do not offer any advantages, the underlying technology behind them (Distributed Ledger Technology, DLT) has many potential applications, both in finance and non-finance sectors. Some of these are listed in Table 2. The Committee observed that DLT makes it easier to identify duplicate transactions, and therefore can be utilised for fraud-detection, processing KYC requirements, and claim management for insurance. Further, it can be helpful for removing errors and frauds in land markets, if used for maintaining land records. The Committee was also of the view that the idea of an official digital currency in India can be explored further, and that the government may setup a group to examine and develop an appropriate model of digital currency in India.
Table 2: Applications of Distributed Ledger Technology
Sector |
Possible uses of DLT |
Payments |
Faster and cheaper cross-border payments Reduced transaction cost for micro-payments |
Identification |
Storing personal records such as birth, marriage or death certificates Removing duplicates in identification platforms such as KYC |
Insurance |
Fraud detection and risk prevention Claims prevention and management |
Ownership registries |
Removing errors and frauds in land markets Administrative ease of maintaining land records |
Trade Financing |
Reduced operational complexity and transaction costs |