The government can now obtain passwords and financial information without a warrant or person’s consent
While cyber activists, bloggers and legal experts have criticized the new rules under the IT Amendment Act, 2008, for gagging free speech, what has gone unnoticed is the
fact that the new regulations also give the government the power to obtain sensitive personal information about individuals from companies without a warrant or the
concerned person’s consent.
The sensitive personal data or information of a person covers passwords, financial information such as bank accounts or credit card details, his or her physiological and
mental health condition, medical records and history, their sexual orientation, and biometric information, says the Information Technology (Reasonable security practices
and procedures and sensitive personal data or information) Rules, 2011, which came into force in April this year.
“information requests [made by government agencies] usually have certain inbuilt checks,” PRS Legislative Research said that for example, search warrants in criminal
cases were issued by a court. Similarly, tapping of telephones or interception of electronic communication can only be authorised by the Union or State Home Secretary
after following a prescribed process.
However, the new rules under the amended IT Act have no such checks and balances — a government agency just needs to send a request in writing to the company
possessing the sensitive personal data or information stating clearly the purpose of seeking such information.
The rules also state that a company can transfer sensitive personal data or information to any company or individual in India or abroad that “ensures the same level of data
protection” that is adhered to by that company as per the new rules.
– from thehindu.com
India is following the steps of fascist USA. There web sites get disconnected from the net because of its content may trouble the authority of corporates.
We need to stop this barbarian laws in India.