Data Protection in India comes within the purview of the Information Technology Act, 2000 and the Law of Contracts as well as the Constitution of India.
Provisions of Information Technology Act, 2000
This Section provides for a penalty for unauthorized use of a computer, computer software or computer network or unauthorizedely downloading, extraction and copying of data are also covered under the same penalty. There is also a penalty for unauthorized introduction of computer viruses of contaminant and for assisting unauthorized access. The maximum amount of penalty is one Crore.
This Section provides that â€œWhoever knowingly or intentionally conceals, destroys or alters or intentionally or knowingly causes another to conceal, destroy or alter any computer source code used for a computer, computer programme, computer system or computer network, when the computer source code is required to be kept or maintained by law for the time being in force, shall be punishable with imprisonment up to three years, or with fine which may extend up to two lakh rupees, or with bothâ€.
Whoever with the intent to cause or knowing that he is likely to cause wrongful loss or damage to the public or any person destroys or deletes or alters any information residing in a computer resource or diminishes its value or utility or affects it injuriously by any means, commits hack. This section imposes the penalty of imprisonment of three years or fine up to two lakh rupees or both on the hacker.
This Section under sub- section 70(g) stipulates that â€œany person who secures access or attempts to secure access to a protected system in contravention of the provisions of this section shall be punished with imprisonment of either description for a term which may extend to ten years and shall also be liable to fineâ€.
This Section Provides that â€œany person who, in pursuance of any of the powers conferred under this Act, rules or regulations made thereunder, has secured access to any electronic record, book, register, correspondence, information, document or other material without the consent of the person concerned discloses such electronic record, book. register, correspondence, information, document or other material to any other person shall be punished with imprisonment for a term which may extend to two years, or with fine which may extend to one lakh rupees, or with bothâ€.
Law of Contract
Data may be protected under the Law of Contracts by drawing out agreements such as Non-Circumvention And Non-disclosure agreement, user licence agreements and referral partner agreements. Agreements such as these contain confidentiality and privacy clauses and also arbitration clauses.
The Personal Data Protection Bill, 2006
This Bill has been introduced in the Rajya Sabha on December 8th 2006. The purpose of this bill is to provide protection of personal data and information of an individual collected for a particular purpose by one organization, and to prevent its usage by other organization for commercial or other purposes and entitle the individual to claim compensation or damages due to disclosure of personal data or information of any individual without his consent and for matters connected with the Act or incidental to the Act.