Recently, the Personal Data Protection Bill, 2019 was introduced in Parliament. The Bill has been referred to a Joint Parliamentary Committee for detailed examination, and the report is expected by the Budget Session, 2020. The Bill seeks to provide for protection of personal data of individuals, create a framework for processing such personal data, and establishes a Data Protection Authority for the purpose. In this blog, we provide a background to the 2019 Bill, and explain some of its key provisions.
What is personal data and data protection?
Data can be broadly classified into two types: personal and non-personal data. Personal data pertains to characteristics, traits or attributes of identity, which can be used to identify an individual. Non-personal data includes aggregated data through which individuals cannot be identified. For example, while an individual’s own location would constitute personal data; information derived from multiple drivers’ location, which is often used to analyse traffic flow, is non-personal data. Data protection refers to policies and procedures seeking to minimise intrusion into the privacy of an individual caused by collection and usage of their personal data.
Why was a Bill brought for personal data protection?
In August 2017, the Supreme Court held that privacy is a fundamental right, flowing from the right to life and personal liberty under Article 21 of the Constitution. The Court also observed that privacy of personal data and facts is an essential aspect of the right to privacy. In July 2017, a Committee of Experts, chaired by Justice B. N. Srikrishna, was set up to examine various issues related to data protection in India. The Committee submitted its report, along with a Draft Personal Data Protection Bill, 2018 to the Ministry of Electronics and Information Technology in July 2018. The Statement of Objects and Reasons of the Personal Data Protection Bill, 2019 states that the Bill is based on the recommendations of the report of the Expert Committee and the suggestions received from various stakeholders.
How is personal data regulated currently?
Currently, the usage and transfer of personal data of citizens is regulated by the Information Technology (IT) Rules, 2011, under the IT Act, 2000. The rules hold the companies using the data liable for compensating the individual, in case of any negligence in maintaining security standards while dealing with the data. The Expert Committee in its report, held that while the IT rules were a novel attempt at data protection at the time they were introduced, the pace of development of digital economy has shown its shortcomings.3 For instance, (i) the definition of sensitive personal data under the rules is narrow, and (ii) some of the provisions can be overridden by a contract. Further, the IT Act applies only to companies, not to the government.
What does the Personal Data Protection Bill provide?
The Bill regulates personal data related to individuals, and the processing, collection and storage of such data. Under the Bill, a data principal is an individual whose personal data is being processed. The entity or individual who decides the means and purposes of data processing is known as data fiduciary. The Bill governs the processing of personal data by both government and companies incorporated in India. It also governs foreign companies, if they deal with personal data of individuals in India.
Will individuals have rights over their data?
The Bill provides the data principal with certain rights with respect to their personal data. These include seeking confirmation on whether their personal data has been processed, seeking correction, completion or erasure of their data, seeking transfer of data to other fiduciaries, and restricting continuing disclosure of their personal data, if it is no longer necessary or if consent is withdrawn. Any processing of personal data can be done only on the basis of consent given by data principal.
Are there any restrictions on processing of an individual’s data?
The Bill also provides for certain obligations of data fiduciaries with respect to processing of personal data. Such processing should be subject to certain purpose, collection and storage limitations. For instance, personal data can be processed only for specific, clear and lawful purpose. Additionally, all data fiduciaries must undertake certain transparency and accountability measures such as implementing security safeguards and instituting grievance redressal mechanisms to address complaints of individuals. Certain fiduciaries would be notified as significant data fiduciaries (based on certain criteria such as volume of data processed and turnover of fiduciary). These fiduciaries must undertake additional accountability measures such as conducting a data protection impact assessment before conducting any processing of large scale sensitive personal data (includes financial data, biometric data, caste, religious or political beliefs).
What is the grievance redressal mechanism if the above restrictions are not followed?
To ensure compliance with the provisions of the Bill, and provide for further regulations with respect to processing of personal data of individuals, the Bill sets up a Data Protection Authority. The Authority will be comprised of members with expertise in fields such as data protection and information technology. Any individual, who is not satisfied with the grievance redressal by the data fiduciary can file a complaint to the Authority. Orders of the Authority can be appealed to an Appellate Tribunal. Appeals from the Tribunal will go to the Supreme Court.
Are there any exemptions to these safeguards for processing of personal data?
Processing of personal data is exempt from the provisions of the Bill in some cases. For example, the central government can exempt any of its agencies in the interest of security of state, public order, sovereignty and integrity of India, and friendly relations with foreign states. Processing of personal data is also exempted from provisions of the Bill for certain other purposes such as prevention, investigation, or prosecution of any offence, or research and journalistic purposes. Further, personal data of individuals can be processed without their consent in certain circumstances such as: (i) if required by the State for providing benefits to the individual, (ii) legal proceedings, (iii) to respond to a medical emergency.
Is the Bill different from the draft Bill suggested by the Expert Committee?
The Bill has made several changes from the draft Bill. For instance, the Bill has added a new class of significant data fiduciaries, as social media intermediaries. These will include intermediaries (with users above a notified threshold) which enable online interaction between users. Further, the Bill has expanded the scope of exemptions for the government, and additionally provided that the government may direct data fiduciaries to provide it with any non-personal or anonymised data for better targeting of services.
In a follow-up blog, we will provide a detailed comparison of the key provisions of this Bill with the Draft Personal Data Protection Bill 2018, released by the Justice B. N. Srikrishna Committee.
Today, a general discussion on the Union Budget 2020-21 is being held in both Houses of Parliament. In the budget, the government presented the estimates of the money it expects to spend on various ministries, and how much money will be raised from different sources such as levy of taxes and dividends from public enterprises in 2020-21. In addition, the budget presented the revised estimates made by the government for the year 2019-20 in comparison to the estimates it had given to Parliament in the previous year’s budget. The budget also gave an account of how much money the government actually raised and spent in 2018-19.
What are revised estimates?
Some of the estimates made by the government might change during the course of the year. For instance, once the year gets underway, some ministries may need more funds than what was actually allocated to them in the budget, or the receipts expected from certain sources might change. Such deviations from the budget estimates get reflected in the figures released by the government at later stages as part of the subsequent budgets. Once the year ends, the actual numbers are audited by the Comptroller and Auditor General of India (CAG), post which they are presented to Parliament with the upcoming budget, i.e. two years after the estimates are made.
For instance, estimates for the year 2019-20 were presented as part of the 2019-20 budget in July 2019. In the 2020-21 budget (February 2020), the government presented 2019-20’s revised estimates based on the actual receipts and expenditure accounted so far during the year and estimations made for the remaining 2-3 months.
Is there a way to find out the government’s actual receipts or expenditure mid-year?
The actual receipts and expenditure accounts of the central government are maintained by the Controller General of Accounts (CGA), Ministry of Finance on a monthly basis. On January 31, 2020, the CGA updated the accounts figures for the period April to December 2019. Thus, we have unaudited actuals for the first nine months of the financial year.
How do the actual figures for the year 2019-20 so far compare with the revised estimates?
Table 1 gives the revised estimates presented by the central government for the year 2019-20 and the monthly account figures maintained by the CGA for the nine-month period April to December 2019. The difference between these two figures gives us the three-month target that the government will have to meet by March 2020 to reach its revised estimates.
Till December 2019, the government has spent Rs 21.1 lakh crore, which is 78% of the revised estimates for 2019-20. While the expenditure has reached 78% of the target, so far, the government has been able to generate only Rs 11.8 lakh crore or 61% of the receipts (excluding borrowings) for the year 2019-20. This implies that the receipts will have to grow at a rate of 41% in the three-month period January-March 2020 to meet the revised estimates of Rs 19.3 lakh crore. So far, receipts have grown at a rate of 4%.
Table 1: Budget at a Glance – Comparison of 2019-20 revised estimates with Apr-Dec 2019 figures (Rs crore)
|
Budget at a Glance |
Actuals |
Revised |
Nine-month period |
Three-month target |
Growth rate so far |
Growth target |
|
2018-19 |
2019-20 |
Apr-Dec 2019 |
Jan-Mar 2020 |
% change |
% change |
|
|
Revenue Expenditure |
20,07,399 |
23,49,645 |
18,54,125 |
4,95,520 |
14% |
28% |
|
Capital Expenditure |
3,07,714 |
3,48,907 |
2,55,522 |
93,385 |
21% |
-3% |
|
Total Expenditure |
23,15,113 |
26,98,552 |
21,09,647 |
5,88,905 |
15% |
22% |
|
Revenue Receipts |
15,52,916 |
18,50,101 |
11,46,897 |
7,03,204 |
6% |
50% |
|
Capital Receipts |
1,12,779 |
81,605 |
31,025 |
50,580 |
-33% |
-24% |
|
of which Disinvestment |
94,727 |
65,000 |
18,100 |
46,900 |
-47% |
-22% |
|
Total Receipts (without borrowings) |
16,65,695 |
19,31,706 |
11,77,922 |
7,53,784 |
4% |
41% |
|
Revenue Deficit |
4,54,483 |
4,99,544 |
7,07,228 |
-2,07,684 |
||
|
Fiscal Deficit |
6,49,418 |
7,66,846 |
9,31,725 |
-1,64,879 |
|
|
|
Primary Deficit |
66,770 |
1,41,741 |
5,07,411 |
-3,65,670 |
Sources: Union Budget 2020-21; Controller General of Accounts, Ministry of Finance; PRS.
How do the actual tax receipts fare in comparison to the revised estimates of 2019-20?
A lower than estimated growth in nominal GDP has also affected the tax receipts of the government during the year. The 2019-20 budget estimated the nominal GDP to grow at 12% over the previous year, whereas the latest estimates suggest this growth rate to be 7.5% in 2019-20. The revised estimates for 2019-20 show gross tax receipts of Rs 21.6 lakh crore (includes states’ share). Till December 2019, tax receipts of Rs 13.8 lakh crore has been collected, which is 64% of the target. The tax receipts will have to grow at 19% in the three-month period January-March 2020 to meet the target. Table 2 shows similar comparison for the various taxes and also for the tax receipts devolved to states. While the budget estimated a growth in receipts from all major taxes, receipts from taxes such as corporation tax (-14%), union excise duties (-2%), and customs (-12%) have declined during the period Apr-Dec 2019.
Table 2: Tax receipts – Comparison of 2019-20 revised estimates with Apr-Dec 2019 figures (Rs crore)
|
Revenue Receipts |
Actuals |
Revised |
Nine-month period |
Three-month target |
Growth rate so far |
Growth target |
|
2018-19 |
2019-20 |
Apr-Dec 2019 |
Jan-Mar 2020 |
% change |
% change |
|
|
Gross Tax Revenue |
20,80,465 |
21,63,423 |
13,83,035 |
7,80,388 |
-3% |
19% |
|
Devolution to States |
7,61,454 |
6,56,046 |
4,76,113 |
1,79,933 |
-2% |
-34% |
|
Net Tax Revenue |
13,17,211 |
15,04,587 |
9,04,944 |
5,99,643 |
-3% |
57% |
|
Dividend and Profits |
1,13,420 |
1,99,893 |
1,61,979 |
37,914 |
175% |
-30% |
|
Other Non-tax Revenue |
1,22,284 |
1,45,620 |
79,974 |
65,646 |
-10% |
96% |
|
Revenue Receipts |
15,52,916 |
18,50,101 |
11,46,897 |
7,03,204 |
6% |
50% |
Note: Figures for income tax exclude receipts from the Securities Transaction Tax.
Sources: Receipts Budget, Union Budget 2019-20; Controller General of Accounts, Ministry of Finance; PRS.
If we look at sources of receipts other than taxes, non-tax revenue during Apr-Dec 2019 is Rs 2.4 lakh crore, i.e. 69% of the estimated Rs 3.5 lakh crore. Disinvestment receipts till date amounted to Rs 18,100 crore, i.e. 17% of the budget target of Rs 1.05 lakh crore. Though the investment target has been revised down to Rs 65,000 crore, it implies that Rs 47,000 crore would need to be raised in the next two months.
How does this impact the borrowings of the government?
When the expenditure planned by the government is more than its receipts, the government finances this gap through borrowings. This gap is known as fiscal deficit and equals the borrowings required to be made for that year. Given lower than expected receipts, the government has had to borrow more money than it had planned for. Borrowings or fiscal deficit of the government, till December 2019, stands at Rs 9.3 lakh crore, which is 22% higher than the revised estimate of Rs 7.7 lakh crore. Note that with three months still remaining in the financial year, fiscal deficit may further increase, in case receipts are less than expenditure.
When we look at fiscal deficit as a percentage of GDP, the 2019-20 budget estimated the fiscal deficit to be at 3.3% of GDP. This has been revised upward to 3.8% of GDP. However, till December 2019, fiscal deficit for the year 2019-20 stands at 4.6% of GDP (taking the latest available GDP figures into account, i.e. the First Advance Estimates for 2019-20 released in January 2020). This increase in fiscal deficit as a percentage of GDP is because of two reasons: (i) an increase in borrowings as compared to the budget estimates, and (ii) a decrease in GDP as compared to the estimate made in the budget. The latter is due to a lower than estimated growth in nominal GDP for the year 2019-20. The 2019-20 budget estimated the nominal GDP to grow at 12% over the previous year, whereas the latest estimates suggest this growth rate to be 7.5% in 2019-20.
Note that, in addition to the expenditure shown in the budget, the government also spends through extra budgetary resources. These resources are raised by issuing bonds and through loans from the National Small Savings Fund (NSSF). The revised estimates for 2019-20 show an expenditure of Rs 1,72,699 crore through such extra-budgetary resources. This includes an expenditure of Rs 1,10,000 crore by the Food Corporation of India financed through loans from NSSF. Since funds borrowed for such expenditure remain outside the budget, they do not get factored in the deficit and debt figures. If borrowings made in the form of extra-budgetary resources are also taken into account, the fiscal deficit estimated for the year 2019-20 would increase from 3.8% of GDP to 4.6% of GDP due to extra-budgetary borrowings of Rs 1,72,699 crore. This does not account for further slippage if the targeted revenue does not materialise.
