 bill no xxiii  of  2014 the personal data protection bill, 2014 a billto provide for protection of personal data and information of an individual collected for aparticular purpose by one organization, and to prevent its usage by other organization for commercial or other purposes and entitle the individual to claim compensation or damages due to disclosure of personal data or information of any individual without his consent and for matters connected therewith or incidental theretobe it enacted by parliament in the sixty-fifth year of the republic of india as follows:—1 (1) this act may be called the personal data protection act, 2014(2) it extends to the whole of indiashort title, extent and commencement(3) it shall come into force with immediate effect5definitions2 in this act, unless the context otherwise requires,—(a) ''appropriate government'' means in case of a state, the government of that state and in other cases, the central government;(b) ''data controller'' means data controller appointed under section 6 (c) "personal data" means information or data which relate to a living individual who can be identified from that information or data whether collected by any government or any private organization or agency;(d) "prescribed" means prescribed by rules made under this act;5(e) "processing" means obtaining, recording or holding the personal data orinformation of an individual and carrying out any operation on the information including alternation, disclosure, transmission, dissemination and destruction103 the personal data of any person collected for a particular purpose or obtained inconnection with any transaction, whether by appropriate government or by any private organization, shall not be put to processing without the consent of the person concerned:provided that personal data of any person may be processed for any of the following purposes:—(a) the prevention or detection of crime;15(b) the prosecution of offenders; and (c) the assessment or collection of any tax or duty: provided further that no consent of the individual shall be required if the personaldata details of the individual are obtained through sources which have been made public20personal  data not to be disclosed4 the personal data of any person collected by an organization whether governmentor private, shall not be disclosed to any other organization for the purposes of direct marketing or for any commercial gain:provided that personal data of any person may be disclosed to charity and voluntaryorganizations after obtaining prior consent of the person255 every person whose personal data or details have been processed or disclosed fordirect marketing or for any commercial gain without consent shall be entitled to compensation for damages in such manner as may be prescribedcompensation for damages in case of disclosure of data information appointment of data controller306 (1) the appropriate government shall, by notification in the official gazette, appointas many data controllers as may be necessary for over viewing the complaints relating to processing and disclosing of personal data and claim for compensation:provided that there shall not be more than three data controllers in a state or a union territory(2) the terms and conditions of service of the data controller shall be such as may be prescribed35(3) the appropriate government shall provide such number of officers and staff as may be necessary efficient functioning of the data controller(4) the procedure for appointment of the data controllers, their powers and functions shall be such as may be prescribed407 every organization, whether government or private, engaged in the commercialtransaction and collection of personal data of persons shall:—obligation on organization collecting personal data(i)  report to the data controller the type of personal data and information beingcollected by them and the purpose for which it is being or proposed to be used;(ii) take adequate measures to maintain confidentiality and security in the handling of personal data and information; and(iii) collect only such information that is essential for completion of any transaction with the individual5 8 the appropriate government shall, after due appropriation made in this behalf, provide such sums of money as it may think fit for being utilized for the purpose of this actappropriate government to provide moneypenalty109 whoever contravenes or attempts contravene or abets the contravention of theprovisions of this act shall be punishable with imprisonment for a term, which may extend to three years or with fine, which may extend upto ten lakh rupees or with both:provided that the compensation for damages claimed under section 5 shall be in addition to the fine imposed under this sectionoffence by companies1510 where a person committing a contravention of any of the provisions of this act or of any rule, made thereunder is a company, every person who, at the time the contravention was committed, was in charge of, and was responsible to, the company for the conduct of business of the company as well as the company, shall be guilty of the contravention and shall be liable to be proceeded against and punished accordingly:20provided that nothing contained in this sub-section shall render any such person liable to punishment if he proves that the contravention took place without his knowledge or that he exercised all due diligence to prevent such contraventionexplanation— for the purpose of this section:— (i) "company" means anybody corporate and include a firm or other association of individuals; and(ii) "director", in relation to a firm, means a partner in the firm25summary trial2 of 197411 all offences under this act shall be tried summarily in the manner prescribed forsummary trial under the code of criminal procedure, 1973power to remove difficulties3012 if any difficulty arises in giving effect to the provisions of this act, the centralgovernment may, by order published in the official gazette, make such provisions not inconsistent with the provisions of this act, as appear to it to be necessary or expedient for removing the difficulty:provided that no such order shall be made after the expiry of the period of three years from the date of commencement of this actsavings13 the provisions of this act shall be in addition to, and not in derogation of, theprovisions in any other law, for the time being in force, relating to protection of personal data35power to make rules14 the central government may, by notification in the official gazette make rules forcarrying out the purposes of this act statement  of  objects  and  reasonsin our country, at present, there is no law on protection of personal information and data of an individual collected by various organizations as a result many a time, personal information of an individual collected for a particular purpose is misused for other purposes also, primarily for direct marketing without the consent of the individualthe personal data of an individual collected by an organization is at times sold to other organizations for paltry sum in connivance with the employees of the organizations these organizations with the competition to out do each other enter into the privacy of individual by making direct marketing calls there has to be some internal confidentiality standard within the system so that personal information of an individual may not be transferred to others, which, at times, causes a lot of distress and embarrassmentin many countries this right of individual has been recognized as basic civil right as an extension of right to privacy and laws have been enacted to protect the personal data of individuals accordingly, there is a need to have a law in our country also for protection of personal information to ensure that personal information of an individual collected for a particular purpose should be used for that particular purpose only and is not revealed to others for commercial or other purposeshence this billvijay jawaharlal darda financial  memorandumclause 6, of the bill empowers the appropriate government to appoint data controllers for over viewing the complaints relating to processing and disclosing of personal information and claim for compensation clause 8 provides that appropriate government shall make the funds available for being utilize for the purposes of this act since the expenditure in respect of uts shall be borne out by central government, the bill if enacted will involve expenditure from the consolidated fund of india to the tune of rupees one crore per annum memorandum  regarding  delegated  legislationclause 14 of the bill empowers the central government to make rules for the purposes of this bill the rules will relate to matter of details only, the delegation of legislative powers is therefore of normal character————— abillto provide for protection of personal data and information of an individual collected for aparticular purpose by one organization, and to prevent its usage by other organization for commercial or other purposes and entitle the individual to claim compensation or damages due to disclosure of personal data or information of any individual without his consent and for matters connected therewith or incidental thereto—————(shri vijay jawaharlal darda, mp)