India's Digital Independence: What Govt Can Do To Protect Residents Against Data Breaches
A major reason why the digital identity of a user is at risk is due to the fact that there is no standard in the way consumers deal with their identity online.
Personal data exploitation is a goldmine that has been exploited by big players in the digital world. Several leading companies have suffered data breaches and thereby exposed data subjects to unwarranted risks. Today, data brokers, advertisers, search engines, and social media networks are at the centre of privacy breaches — they know everything about consumers, from their date of birth to marital status as well as from the food they like to the schools their kid goes to.
In the Indian context, this is more serious as the population is not well aware of data risks and has evolving levels of digital literacy.
As India steps into the 5G era with ambitious goals set to be achieved within ‘Amrit Kaal’ (2022-2047), it needs a robust digital Independence strategy against global personal data exploitation — designed and executed by Indians — in order to maintain control over the Indian user’s digital identity and privacy.
India’s Digital Independence Plan: A three-part strategy to safeguard user data
A major reason why the digital identity of a user is at risk is due to the fact that there is no standard in the way consumers deal with their identity online. Mostly, they use different usernames and passwords on different websites, which means that there is a high chance of getting their data hacked or misused.
To safeguard data, we need a single digital identity that can be used across the Internet. In order to achieve this, the Indian government must devise a single digital identity platform for the Indian population with appropriate regulations and safeguards. This digital identity platform should be able to provide consumers with all services they are getting today without any hassle such as booking tickets, buying health insurance policies, opening bank accounts, filing income tax returns, etc.
One such initiative is the DigiLocker linked single-sign-on technology which the Centre has launched. But it has limitations. People can register on the platform only if they have a mobile number and e-mail linked with Aadhaar Card. However, a majority of the population doesn’t use e-mail in India. We need to find out an easy solution. This in a way will tokenise identity the way RBI has tokenised cards.
Digital literacy, awareness, and legal protection
We have become so dependent on the Internet for almost everything that we have become oblivious to the risks associated with our data being exposed online. This lack of awareness and digital literacy will eventually lead to a situation wherein people don’t know that they are being exploited until it is too late.
During ‘Amrit Kaal’, India will have to work actively to promote digital literacy and awareness to enable its people to avail the benefits of new-age technologies. This can be ensured by communicating awareness campaigns through social media, schools, and other public forums.
Moreover, Indian laws should be amended to make data protection a fundamental right. A data protection law can be enforced to ensure that personal data is used appropriately. The law should contain provisions for imposing a penalty on companies that misuse or fail to protect personal data. Appointing a Data Protection Regulator (DPR) is the need of the hour to execute this task.
Develop a made-in-India digital identity platform
The government can partner with an Indian company that has been working in the field of digital identity for a long time to create a trusted digital identity platform for Indians. This platform can be used to store the digital identity of Indian citizens safely.
Partner with global players to make Indian services more trusted by citizens
There are many digital services — healthcare services, online education, online shopping and e-commerce, remote work, and freelancing service — that are run by foreign companies, and these are immensely beneficial for Indians. The Centre can partner with these companies to make them more trusted for the Indian population. It must also regulate the activities in terms of data use and protection and impose a penalty on non-compliance with laws and regulations.
‘Tech-ade of India’
As Prime Minister Narendra Modi outlines the vision of the newly launched 5G as ‘Internet for All’ and hails the current decade as ‘Tech-ade of India’, we must make every effort to remove all the hurdles in the way of using the potential of the Internet. Data privacy is primary among them.
In this ‘Amrit Kaal’, we will have to spread awareness to the nooks and corners of the country, create a robust policy framework, and establish partnerships with key stakeholders to safeguard consumer data. The measures to protect data privacy will help Indians reap the maximum benefits of technology and the ongoing digital revolution.
(The author is the Senior Managing Director at Ankura Consulting, which provides integrated strategic counsel to help its clients address complex issues)
Disclaimer: The opinions, beliefs, and views expressed by the various authors and forum participants on this website are personal.