Cyber Security – CERTs, Policy, etc

Explained: Debate over Data Localization


From UPSC perspective, the following things are important :

Prelims level : Data Localization

Mains level : Debat over Data Localization Policy in India

  • The IT Ministry’s Bill on data protection is scheduled to be introduced in Parliament during the current session.
  • Worldwide, the data flow debate is playing out at the World Trade Organisation (WTO) and G20.

The ‘Data’ under debate

  • Data is any collection of information that is stored in a way so computers can easily read it.
  • These days, most people refer to data to mean information about their messages, social media posts, online transactions, and browser searches.
  • Big data refers to the immense amount of data that can now be collected, stored, and analysed to find patterns.

Why is Data important?

  • This large collection of information about people’s online habits has become an important source of profits.
  • Your online activity can expose a lot about who you are, and companies find it valuable to use the information to target advertisements to you.
  • Governments and political parties have also gained interest in these data sets for elections and policymaking.

Data Localization

  • Data is stored in a physical space, like a file cabinet that can be the size of the Taj Mahal.
  • Data is also transported across country borders physically, traveling through underwater cables that run as deep as Mount Everest and as long as four times the span of the Indian Ocean.
  • Thirdly, just as oil is refined, data has to be processed to be useful. This means it is analysed by computers.
  • These aspects of data flows — where it is stored, where it is sent, where it is turned into something useful — determines who has access to the data, who profits off the data, who taxes the data, and who “owns” the data.
  • With these questions in mind, individual governments are developing their own domestic rules and negotiating with each other on a global stage, raising values of national security, economic growth, and privacy.

India in favor of Data Localization

  • India’s recent drafts and statements have strong signals for data localisation, which means that data of Indians (even if collected by an American company) must be stored and processed in India.
  • Along with a RBI directive to payment companies to localize financial data, the Ministry of Commerce’s draft e-commerce policy is currently in public consultation.
  • The IT Ministry has drafted a data protection law that will be introduced in Parliament and has also framed draft intermediary rules that were leaked earlier.
  • These laws, broadly speaking, could require Facebook, Google, and Amazon to store and process in India information such as an Indian’s messages, searches, and purchases.
  • In some cases, they restrict what type of data these companies can collect. In others, it requires only a copy of the data to be in the country.
  • By requiring a copy of the data to be stored in India (data mirroring), the government hopes to have more direct control over these companies, including the option to levy more taxes on them.
  • The government also argues for data localisation on the ground of national security, to prevent foreign surveillance and attacks.

What are counter-arguments against data localisation?

  • On the other side, the US government and companies want cross-border flow of data. It would allow companies to store the data of Indians in the most efficient place in the world.
  • Even though India’s data economy is not as large as that of others, it is one of the fastest growing, making it a market that global companies cannot afford to ignore.
  • Proponents of free flow of data worry that if all countries begin to protect their data, it may backfire on India’s own companies that seek global growth.
  • Others caution that these laws could bring increased state surveillance, like India’s draft intermediary rules that would require WhatsApp to change its design to proactively filter messages.
  • The company says messages are currently encrypted, meaning neither the company nor any government can see them.

Data policies in neighbourhood

  • China has developed similar laws, which proponents say allow for a flourishing domestic economy of data centres and data processing by blocking foreign players out.
  • This is why Indian companies, like Reliance and PayTM, usually support data localisation.
  • The other argument from the Indian government is that localisation will help law enforcement access the data.
  • Currently, India has to use “mutual legal assistance treaties” (MLAT) with the US to get the data of Indians that are controlled by American companies.

What is happening at the global forums?

  • Trade tensions worldwide are escalating, giving the data flow debate new relevance at the WTO and G20.
  • WTO member countries are negotiating rules about e-commerce, which is the buying and selling of goods and services online.
  • Digital trade contributes more to global GDP than physical trade. India is one of the fastest growing markets, with e-commerce expecting to reach $1.2 trillion by 2021.
  • These laws raise questions about where companies can store, process, and transport data about transactions.
  • In their proposals, the US and the EU have called to prohibit customs duties on online transactions while China and Pakistan have called for allowing them.
  • The US has also recommended not having overly burdensome data standards nor localisation requirements, while the EU wants data localisation requirements.

Ahead of G20 meet

  • A principle titled “Data Free Flow with Trust” (DFFT) — supported by US, Japan, and Australia — is expected to be a significant talking point at the upcoming G20 summit.
Notify of
Inline Feedbacks
View all comments