Overview
Future of Privacy Forum (FPF) and NASSCOM, India’s largest industry association for the IT-BPM sector, are co-hosting two webinars on the consent regime under India’s new Digital Personal Data Protection Act of 2023 (DPDPA).
A key design feature of the DPDPA is its consent-centric approach. The aim of these webinars is to bring together views and perspectives from a diverse set of experts from regulators, industry, civil society, and the global data privacy community, to explore how these rules can be informed by the experiences in other jurisdictions.
Monday, January 29, 2024: Making Consent Under the DPDPA Scalable
Panel 1: Realizing the ‘Consent Manager’ Model | 6:30 – 7:30 am EST / 12:30-1:30 pm CEST / 5 – 6 pm IST
The DPDPA recognises ‘Consent Managers’ as players involved in intermediate consent management. Parallels are being drawn with the Account Aggregators (AA) that embody India’s approach to open banking. Many expect that the regime for Consent Managers, which is to be defined in rules, will be informed by India’s experience with the AA model. That said, the DPDPA does recognize the potential for ‘Consent Managers’ as a regulatory category to accommodate multiple different models that look to enhance consent.
- Bertram D’Souza, CEO, Protean AA and Convener, AA Steering Committee, Sahamati Foundation
- Malte Beyer-Katzenberger, Policy Officer, European Commission
- Rahul Matthan, Partner – TMT, Trilegal
- Ashish Aggarwal, VP & Head, Public Policy, nasscom
- Vikram Pagaria, Joint Director, National Health Authority
- Moderators: Malavika Raghavan, Senior Fellow, FPF, Doctoral Researcher (PhD Candidate), London School of Economics and Varun Sen Bahl, Manager, Public Policy, nasscom
Panel 2: Operationalizing ‘Verifiable Parental Consent’ in India | 7:40 – 8:40 am EST / 1:40 – 2:40 pm CEST / 5 – 6 pm IST
The DPDPA also necessitates ‘verifiable parental consent’ to process the personal data of children. This appears to be inspired by similar requirements found in the Children’s Online Privacy Protection Act (COPPA) in the United States that is enforced by the Federal Trade Commission. However, the precise scope of application, and manner of operation, of this requirement is also left up to rules to define.
- Bailey Sanchez, Senior Counsel, Youth & Education Privacy, Future of Privacy Forum
- Kieran Donovan, Founder, k-ID
- Vrinda Bhandari, Advocate, Supreme Court of India
- Iqsan Sirie, Partner, TMT, Assegaf Hamzah & Partners
- Mr. Rakesh Maheshwari, Former head of the Data Governance / Cyber Laws Division, Ministry of Electronics and Information Technology
- Moderators: Christina Michelakaki, Policy Counsel for Global Privacy, Future of Privacy Forum and Varun Sen Bahl, Manager, Public Policy, nasscom
FPF Speakers Highlighted Below.