Restrictions on Cross Border Data Exchange in India: A Good Move?

Nitya Jain, Institute of Law Nirma University

Introduction

The unprecedented surge in the global digital market has made data a valuable asset for individuals, corporations and Governments. Cross-border data flows have shrunk the world, allowing people across the globe to have the same user experience on the Internet. However, the explosion in the volume of data has generated as much a threat to its misuse as it created opportunities for companies. Today few global big shot organizations dominate the digital economy and their model is centered around data. Greater access to data provides a greater digital capital to a corporation, granting it an advantage over its competitors. Owing to this disadvantage faced by the domestic and small scale organizations, most jurisdictions impose conditions on when and how data can be transferred, and consequently some resort to physical data localization requirements. A study by Mckinsey Global Institute found that in 2014 the direct impact of cross-border data flows had raised world GDP by 3 percent (worth about $2.2 trillion in 2014), which exceeded the contribution of trade in traditional goods in that year.

With mobile phone penetration projected to touch 90% and internet users touching 850 million by 2022, India’s digital economy opportunities are estimated at USD 1 trillion by 2025. Like other jurisdictions, India also aims to exercise greater sovereign control over their data.[1] Currently, India is implementing aggressive data localization laws, retaining the power to data for their domestic & small scale enterprises. Simply put, data localisation is the act of storing data on any device that is physically present within the borders of a specific country where the data was generated. The free flow of digital data, especially data that could impact government operations or operations in a region, is restricted by the governments of some countries. This article analyses the impact of data localization especially in the Indian market and consequently advocates the free flow of data.

Indian legal framework

India’s data localization gambit started when the Reserve Bank of India issued a directive to store data related to payment systems in India.[2] Since then, there have been 8 sectoral notifications restricting data flow in some form ranging from sectoral regulators governing insurance, healthcare, and e-commerce data.

The draft Personal Data Protection Bill 2019 (‘2019 Bill’) aims to regulate the cross border data flow in India. As per the draft Personal Data Protection Bill 2019. [3] The organizations that collect or process sensitive data in India and store it overseas should not share the information with any other entity, regardless of whether a consumer has given consent. Data export can only be carried out through limited routes.

One notable provision proposed by the bill was regarding the storage of “sensitive personal data” within India.[4] Contrary to the General Data Protection Regulation (EU-GDPR), which provides protection for all kinds of personal data in the context of data export and provides for various alternatives to transfer data, the Clause 41 of 2019 bill prescribes that – sensitive personal data can be only transferred abroad for the purpose of processing upon the fulfillment of certain elaborative conditions. The draft policy also exempts certain categories of data from restrictions on cross-border data flow. Owing to the new policy, multinational companies will be obligated to open new data centers, re-architect their network infrastructure, or use local cloud service providers.

While the Indian government and the domestic parties’ stands in support of data localization for the creation of high-value digital products in the country, the public policy verticals of Big Tech are engaged in protracted lobbying against data localization. For instance, Facebook and Google have openly opposed data localization and the US reportedly mulled restricting H1B visas for any country that has a data localization requirement. The multilateral debate on the free flow of data was showcased on an international level in July 2019 G- 20 summit when the BRICS countries including India releasing a strong statement emphasizing the sovereign right of nations to use data for improving citizen welfare while the US made a statement explicitly opposing data localization.

The Pros and Cons

On one hand, restricted cross border data flow is deemed to protect and develop Medium and Small Manufacturing Enterprises and domestic players from global companies that have firsthand access to data. Local hosting will ensure the safety of sensitive data and will support ‘make in India’ scheme by inviting multinationals to open new data centers, re-architect their network infrastructure, or use local cloud service providers. Further, there is a lack of cross border laws in the country. Indian legal mechanism is not equipped to handle cross border flow of data and a restricted approach works best in lieu of security.

On the other hand, free flow of data will enable Indian MSMEs to digitally engage with the global supply chain and customers that will save the time and cost. Widespread localisation norms coupled with a lack of existing data infrastructure in the country will reduce foreign investment.[5]As per the European Centre for International Political Economy study, imposing economy-wide data localisation requirements could reduce the Indian GDP by 0.8 percent and domestic investments by 1.4 percent and the loss per worker would be equivalent to 11 percent of the average monthly salary. A few authors studied that “any gains stemming from data localization are too small to outweigh losses in terms of welfare and output in the general economy”.[6] Further, given India’s dominant position in the business processing and outsourcing industries, restricting the data flow would appear detrimental to its national economic interests where India is aiming to become a global IT hub.

The free flow of data is a significant driver of innovation. It allows the sharing of ideas and information and the circulation of knowledge as well as collaboration among individuals and companies. Cross-border flows of data help reduce costs related to both trade and transactions. A report by the US ITC in 2014 estimated that the Internet reduces trade costs by approximately 26 percent on an average. In any case, despite posing the strongest resistance to data flow, large global players will be better positioned to absorb the additional costs of localisation compared to smaller players defeating the primary objective of the restrictions. While it has been argued that localisation requirements may ensure that Indian data continues to be available in the case of disconnection from the broader Internet, but this to be improbable and insufficient justification to impose broad localisation measures. At best, this may point to the need to localise certain particularly important or sensitive types of data.

Conclusion

The very recent Schrems Judgment reinforces the importance of secure user data exchange on international commerce. It was observed that data globalization does not translate to an insecure exchange of data. With a robust system of laws in place, the free flow of data will lead to a major boom in trade & commerce. The author opines that it would be premature for a developing economy like India to either opt for sweeping national data localization laws or completely dismiss their ability to do so by adopting sweeping ‘free flow of data’ provisions that are being proposed in trade negotiations.[7]

Indian government’s multidirectional aspirations of ‘Digital India’, ‘Make in India’ and ‘India as a global business hub’ requires avoidance of unidirectional policies. In my opinion, there is a clash between aspirations of the Indian government when the ‘Make in India’ scheme is faced with Increasing foreign direct investment plans and cross border data flow stands in the middle as the deciding factor. While there should be no rush to sign data free flow agreements, aggressive localization provisions incorporated in the policy will do more harm than good. Before introducing extreme localisation regulations India needs to develop equivalent data infrastructure. Eventually the cost of introducing broad and sweeping data localisation norms is likely to outweigh its benefits. India’s position on data localisation must ultimately be weighed against the government’s aspirations to create a ‘Digital India’ and the need for strategic thinking on whether a closed data economy or an open one would be more conducive to meeting those goals. Therefore, data localization is clothed with several challenges, which need to cogitate about in advance.


[1]Draft National e-Commerce Policy, issued by the Department of Industrial Policy and Promotion, dated February 23, 2019. See: https://dipp.gov.in/sites/default/files/DraftNational_e-commerce_Policy_23February2019. pdf. On August 2, 2019, a similar draft policy to regulate e-Commerce entities was released by the Ministry of Consumer Affairs. (see: https://consumeraffairs.nic.in/sites/default/files/file-uploads/latestnews/Guidelines%20on%20e-Commerce.pdf).

[2]RBI’s Discussion Paper on Guidelines for Payment Gateways and Payment Aggregators, dated September 17, 2019, https://www.rbi.org.in/Scripts/PublicationReportDetails.aspx?UrlPage=&ID=943.

[3] The Personal Data Protection Bill, 2019 (Act of parliament No. 373 2019).

[4] Section 3, the Personal Data Protection Bill, 2019 (Act of parliament No. 373 2019).

[5]Data localisation in India: Questioning the means and ends, published by Rishab Bailey and Smriti Parsheera on October 31, 2018. See: https://www.nipfp.org.in/media/medialibrary/2018/10/WP_2018_242.pdf.

[6] European Data Protection Supervisor. (2014). Opinion on the commission communication on internet policy and governance – europe’s role in shaping the future of internet governance. European Data Protection Supervisor. (Retrieved from https://edps.europa.eu/sites/edp/files/publication/14 – 06 – 23 internet governance en.pdf).

[7] Supra Note 4.

20 Replies to “Restrictions on Cross Border Data Exchange in India: A Good Move?”

  1. Furthermore, i believe that mesothelioma cancer is a exceptional form of cancer malignancy that is generally found in these previously subjected to asbestos. Cancerous cells form while in the mesothelium, which is a protective lining that covers almost all of the body’s bodily organs. These cells usually form inside the lining of the lungs, tummy, or the sac which encircles the heart. Thanks for expressing your ideas.

  2. I would also love to add when you do not already have an insurance policy or else you do not belong to any group insurance, you could possibly well benefit from seeking aid from a health insurance professional. Self-employed or people having medical conditions usually seek the help of any health insurance dealer. Thanks for your short article.

  3. I have been browsing online more than 4 hours today, yet I never found any interesting article like yours.
    It’s pretty worth enough for me. In my opinion, if all web owners
    and bloggers made good content as you did, the internet will be
    much more useful than ever before.

  4. It’s the best time to make some plans for the future and it’s time to be
    happy. I’ve learn this put up and if I could I desire to
    recommend you some interesting issues or suggestions. Maybe you
    could write next articles regarding this article. I desire to learn even more things about it!

  5. Good day! I could have sworn I’ve been to your blog before but after browsing through
    a few of the posts I realized it’s new to me.
    Anyways, I’m definitely delighted I found it and I’ll be bookmarking it and checking back frequently!

  6. I will immediately clutch your rss as I can’t in finding your email subscription link or newsletter service.
    Do you’ve any? Kindly let me realize so that I may just subscribe.
    Thanks.

  7. I’ve been surfiing online morre thqn thhree hourss today, bbut I
    bby nno meams fouhnd any ihteresting article liie
    yours. It’s lovely woirth enough forr me.
    Personally, if aall web owners and bloggrs masde god content ass yoou probabvly did, thee interrnet might
    be muchh more uzeful thn eve before.

  8. What i don’t realize is in fact how you’re no longer actually much more well-preferred than you might be now. You are so intelligent. You recognize therefore considerably when it comes to this matter, made me for my part consider it from so many various angles. Its like men and women aren’t interested until it抯 something to do with Girl gaga! Your individual stuffs great. At all times deal with it up!

  9. Thanks for the thoughts you have shared here. In addition, I believe usually there are some factors which will keep your motor insurance premium straight down. One is, to contemplate buying vehicles that are within the good report on car insurance corporations. Cars which might be expensive are definitely more at risk of being snatched. Aside from that insurance is also good value of your car or truck, so the higher in price it is, then the higher the particular premium you have to pay.

  10. I was suggested this blog by my cousin. I am not sure whether this post is written by him as no one else know such detailed about my difficulty. You’re wonderful! Thanks!

  11. Have you ever thought about publishing an ebook or guest authoring on other blogs? I have a blog based upon on the same ideas you discuss and would really like to have you share some stories/information. I know my visitors would value your work. If you’re even remotely interested, feel free to send me an email.

  12. I have learned a number of important things via your post. I’d personally also like to say that there can be situation where you will make application for a loan and never need a co-signer such as a Federal Student Support Loan. But when you are getting credit through a conventional bank then you need to be able to have a co-signer ready to enable you to. The lenders will probably base their decision on the few components but the biggest will be your credit score. There are some loan companies that will in addition look at your job history and make a decision based on that but in almost all cases it will be based on on your scores.

  13. I have discovered some significant things through your site post. One other thing I would like to talk about is that there are many games in the marketplace designed mainly for toddler age little ones. They consist of pattern recognition, colors, creatures, and forms. These commonly focus on familiarization instead of memorization. This keeps a child engaged without sensing like they are learning. Thanks

  14. One more issue is really that video gaming has become one of the all-time most important forms of excitement for people of all ages. Kids play video games, plus adults do, too. The particular XBox 360 is just about the favorite gaming systems for those who love to have hundreds of activities available to them, as well as who like to relax and play live with other individuals all over the world. Thank you for sharing your thinking.

Leave a Reply

Your email address will not be published. Required fields are marked *