Tag: covid-19

Data Protection in the Times of COVID-19: Indian Aspect

On May 21, 2020

By: Aditi Jaiswal & Anubhav Das, 4th Year students of NUALS Kochi, RMLNLU Lucknow

Introduction

In the wake of COVID-19, where the collection of data is an essential tool to search and track the individuals infected, an issue might arise in the near future when this pandemic is over. The data collected now by the state can be used for its intended purpose, but it can also be used to the detriment of an individual. As a result of this data collection, the right to privacy, which has been declared a fundamental right by the Supreme Court, may be infringed.

Among the data collected to track individuals infected—or potentially infected—with COVID-19 is location data and biographical data. This data is personal and can be used to understand an individual and make predictions about that individual which can be then be used against them. For an example, look at the app recently launched by the Indian government, the Aarogya Setu App. This app predicts the chances of an individual having COVID-19 by tracking the location of an individual. Using the individual’s location, the app then checks if that individual has come into proximity with an infected person. This location data can be used to predict the number of family members present, which grocery store they shop at, and more. Just as Target[1] predicted the pregnancy of a woman by analysing her shopping list, algorithms can be used to process the data collected, ostensibly for COVID-19 tracking, to learn things that one might never wish to reveal. The location tracking could even be used to predict something as personal as an extramarital affair.

Although the privacy policy[2] of the app mentions that the data collected, will be deleted after a certain period of time, do we have any legislation which could be used to make the state liable should they fail to do so? This article will deal with a very basic concept in data protection law: purpose limitation. This article will analyse the existing law in India and whether or not it can combat such issues, before further analysing the Data Protection Bill of 2019 and its importance in the current case.

The Present:

The principle of purpose limitation under the data protection law is this: the data collected must be used for the purpose specified and when that specified purpose is accomplished, the data must later be deleted. It is essential that this principle is adhered to with the data collected by the state to track COVID-19 cases. This is the only way to ensure the data can never be used later for any other purpose.

Currently, the IT (Reasonable Security Practices And Procedures And Sensitive Personal Data or Information) Rules, 2011 (“IT Act”) governs the collection of data.[3] The IT Act recognizes the need for a privacy policy, information collection requirements, information disclosure requirements and more. Rule 5 (4) of the IT Act deals with purpose limitation. Rule 5 states that the “body corporate” cannot retain the data collected after the purpose for which it was collected has been accomplished. This means the “body corporate” are mandated to delete the data once the purpose is accomplished. Had this rule been written more broadly, it could have effectively dealt with the issue of data collection by the state. The problem lies in the definition of “body corporate” under the rule. Rule 5(4) only defines “body corporate” to be “any company and includes a firm, sole proprietorship or other association of individuals engaged in commercial or professional activities”.[4] Thus, this rule does not apply to the state and the data collection done by the state to track cases of COVID-19. This oversight in the IT Act can be dealt with, either through an amendment to the IT Act or with new data protection legislation.

The Future:

In the Puttuswamy case,[5] the Supreme Court acknowledged the need for separate legislation for data protection in India. As a result, after much deliberation, the Personal Data Protection Bill, 2019 (the “PDP Bill”) was introduced in parliament on December, 11 2019. The bill is currently being analysed by a Joint Parliamentary Committee and it includes important provisions which could be used to combat the problem of data collection by the state in the times of COVID-19.

Section 9(1) of the PDP Bill states that the “data fiduciary” shall not retain personal data once the purpose of collecting that data is fulfilled.[6] An important aspect of this provision is that the rule governs not just any “body corporate,” but rather any “data fiduciary.” Section 3 (13) of the PDP Bill defines “data fiduciary” to include the state. This means that if this Bill was law right now, the data collected by the state would be required to be deleted once the pandemic is over or once that data has been used for its purpose. Moreover, if the state does not comply with this provision then it “shall be liable to a penalty which may extend to fifteen crore rupees or four percent of its total worldwide turnover of the preceding financial year, whichever is higher.” However, the PDP Bill is not law right now and there is no a chance of it being enacted soon. This might give the state an active chance to evade liability, even if they violate the privacy of an individual.

The Reality:

As mentioned above, the PDP Bill is still being considered by a Joint Parliamentary Committee. It has not even seen the floor of discussion in the parliament. No one knows when or if this Bill will pass and become law. Moreover, considering the current situation of the COVID-19 pandemic, such discussions or deliberations will only take place once the pandemic is over. Thus, even if the Bill becomes an Act, the important thing to consider now is the retrospective applicability of it.

The state will only be liable for misuse of the data collected now if, when the PDP Bill becomes law, the law has retrospective application. The Bill, in its current form, is silent regarding retrospective application. As per the BN Srikrishna Committee report,[7] which presented the draft Personal Data Protection Bill 2018, the PDP Bill will have no retrospective application. The rationale given by the committee is that retrospective application of the law will not give the data fiduciary enough time to come into compliance. Thus, the state can evade all liability for misuse of personal data and the data collected now can be misused without legal repercussion until the PDP Bill becomes law. This will ultimately hamper the privacy of individuals.

Conclusion:

Data protection legislation in India is needed now. This legislation will help prevent data misuse in the future and will help to maintain the privacy of an individual. The issue of data collection in the times of COVID-19 can also be remedied by amending the IT Act’s definition of “body corporate” to include the state or by enacting the PDP Bill along with a provision for its retrospective application. The retrospective application of the Bill will be an essential step towards curbing the potential misuse of data being done now by the state. This in turn will preserve and protect the informational privacy of individuals.

[1] See Kashmir Hill, How Target Figured Out A Teen Girl Was Pregnant Before Her Father Did, FORBES (Feb. 16, 2012, 11:02am), https://www.forbes.com/sites/kashmirhill/2012/02/16/how-target-figured-out-a-teen-girl-was-pregnant-before-her-father-did/#69f563446668.

[2] See Rohit Chatterjee, Arogya Setu App Gets Revised Privacy Policy, ANALYTICSINDIAMAG (Apr. 2020), https://analyticsindiamag.com/arogya-setu-app-gets-revised-privacy-policy/.

[3] See S.S. Rana & Co, Advocates, India: Information Technology (Reasonable Security Practices And Procedures And Sensitive Personal Data Or Information) Rules, 2011, Mondaq (Sept. 5, 2017), https://www.mondaq.com/india/data-protection/626190/information-technology-reasonable-security-practices-and-procedures-and-sensitive-personal-data-or-information-rules-2011.

[4] See Elonnai Hickok, Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, Centre for internet & society (Aug. 11, 2015), https://cis-india.org/internet-governance/blog/big-data-and-information-technology-rules-2011.

[5] See K. S. Puttaswamy v. Union of India, Writ Petition (Civil) No . 494 of 2012 (Sup. Ct. India Aug. 24, 2017).

[6] See The Personal Data Protection Bill, 2019, PRS Legislative Research, https://www.prsindia.org/billtrack/personal-data-protection-bill-2019.

[7] Committee of Experts Under the Chairmanship of Justice B.N Srikrishna, A Free and Fair Digital Economy: Protecting Privacy, Empowering Indians, Ministry of Electronics & Info. Technology, July 2018, https://meity.gov.in/writereaddata/files/Data_Protection_Committee_Report.pdf.

Courts Across America Adapt and Respond to COVID-19

By JOLT

On April 29, 2020

In Blog Posts

[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”3.22″][et_pb_row admin_label=”row” _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text admin_label=”Text” _builder_version=”3.27.4″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”]

By: Derek Reigle

The COVID-19 pandemic has resulted in extraordinary changes across America and the world. This phenomena has not escaped the American legal system. Last week, the Supreme Court announced that it will begin hearing cases via teleconference, a first for the court.[1] The Supreme Court is not alone in its changes. Indeed, all over America, courts have moved hearings online, which are conducted through video teleconference software programs like Zoom.[2]

States have responded to these new online courts in interesting ways. In Texas, there are guidelines on how to dress and present oneself on Zoom in Court.[3] This makes sense because some attorneys are appearing online while still in bed, leading to judicial reprimands.[4] Further problems also have emerged. Some court hearings have even been hacked into—online trolls “zoom bombing” a court proceeding in order to disrupt the process.[5] As a result of “zoombombing,” federal prosecutors are now issuing warnings that declare intruding into uninvited zoom calls is a felony.[6]

Issues beyond just the logistical impact of online court proceedings have also developed. Some of these substantive concerns will inevitably lead to several interesting and complicated constitutional questions. One of the concerns raised by criminal defense counsels is already being argued in some state courts. They argue that the video examination of witnesses during criminal trials does not fulfill the confrontation requirement enumerated in our Constitution.[7] Another issue is the right to a speedy trial. Cases are being pushed back to June and July across the country,[8] but what if the pandemic continues to linger? The result of these complicated legal questions could determine the future plans that are put in place for the next potential pandemic.

As of now, the extent and length of the pandemic is unknown. However, several additional changes are already permanently altering the legal landscape. Some of these changes could be beneficial in the long run for judges. Confrontation Clause issues aside, many courtroom procedures that require face to face interaction could be moved online.[9] This could help provide some transitional juice to an antiquated profession. Think about it: lawyers could handle cases further away, access to courts could be increased because people could call in remotely, and judicial efficiency could be increased as a result.

Another positive of this situation is that some prisoners who are eligible for parole are now being released in greater numbers.[10] This is due to fears of the coronavirus spreading throughout our prisons and infecting prisoners.[11]America has highest number of incarcerated persons in the world,[12] and reducing those numbers through the release of non-violent offenders would be a great thing.

Ultimately, the next few months and, potentially, years will bring about a significant amount of changes in the way Court is conducted, both in person and online. There will also be changes in how we handle our vulnerable prison population. All of this will lead to several interesting constitutional questions. Hopefully, we can take note of all of these noteworthy changes and implement the unexpected positives from a terrible situation.

[1] See Pete Williams, In Historic First, Supreme Court to Hear Arguments by Phone, NBC News (Apr. 20, 2020), https://www.nbcnews.com/politics/supreme-court/historic-first-supreme-court-hear-arguments-phone-n1182681.

[2] See Aaron Holmes, Courts and Government Meetings Have Fallen into Chaos After Moving Hearings to Zoom and Getting Swarmed With Nudity and Offensive Remarks, Business Insider (Apr. 20, 2020), https://www.businessinsider.com/zoom-courts-governments-struggle-to-adapt-video-tools-hearings-public-2020-4.

[3] See Electronic Hearings with Zoom, Texas Judicial Branch, https://www.txcourts.gov/programs-services/electronic-hearings-with-zoom/.

[4] See Danielle Wallace, Florida Judge Urges Lawyers to Get Out of Bed and Get Dressed for Zoom Court Cases, Fox News (Apr. 15, 2020), https://www.foxnews.com/us/florida-coronavirus-judge-lawyers-zoom-shirtless-bed-poolside-dressed.

[5] See Nick Statt,’Zoombombing’ is a Federal Offense That Could Result in Imprisonment, Prosecutors Warn, The Verge (Apr. 3, 2020), https://www.theverge.com/2020/4/3/21207260/zoombombing-crime-zoom-video-conference-hacking-pranks-doj-fbi.

[6] See id.

[7] See Interview with Hon. Anne Hartnett, Judge, Court of Common Pleas of The State of Delaware, in Dover, Del. (Apr. 21, 2020).

[8] See id.

[9] See id.

[10] See Iowa to Release Prisoners to Minimize Spread of COVID-19, KCCI (Apr. 20, 2020), https://www.kcci.com/article/iowa-to-release-prisoners-to-minimize-spread-of-covid-19/32216621.

[11] See id.

[12] See Drew Kann, 5 facts behind America’s High Incarceration Rate, CNN (Apr. 21, 2019), https://www.cnn.com/2018/06/28/us/mass-incarceratio.n-five-key-facts/index.html.

Image Source: https://www.drugtargetreview.com/news/57287/3d-visualisation-of-covid-19-surface-released-for-researchers/

[/et_pb_text][/et_pb_column][/et_pb_row][/et_pb_section]