In July 2017, the Ministry of Electronics and Information Technology, Government of India had constituted a committee of experts (Committee) under the chairmanship of a retired judge of the Supreme Court, Justice B N Srikrishna, to examine and propose changes to the data protection regime in India. In December 2017, the Committee published a white paper on the data protection framework proposed for India and invited public comments on the same. The Personal Data Protection Bill, 2018 (Draft Bill) has now been proposed after discussions and deliberations by the Committee, both internally as well as with various stakeholders.

The Draft Bill is largely inspired by the European Union’s General Data Protection Regulation, which became effective from 25 May 2018 (GDPR). The Draft Bill provides for a phase wise implementation of its provisions over 18 months upon enactment.