Data Localisation | Gist of Rajya Sabha TV / RSTV (now Sansad TV) - UPSC PDF Download

Introduction:

In 2006 British mathematician Clive Humbly said that Data is the oil of the 21st Century. This has indeed turned out to be true with the rapid growth of the digital economy. Data plays an increasingly important role as an economic and strategic resource. It can be used to make decisions with economic impacts, environmental impacts or effects on health, education or society in general. The volume of data in the world is increasing exponentially. As per UN’s digital economy report, 2021 64.2 zettabytes of data were created in 2020 which is a 314 percent increase from 2015. Data localisation refers to various policy measures that restrict data flows by limiting the physical storage and processing of data within a given jurisdiction’s boundaries. So where do we stand on the issue of data localisation and what are the challenges on this front.

Necessity for India:

• Data localization is the act of storing data on any device that is physically present within the borders of a specific country where the data was generated.
• For securing citizen’s data, data privacy, data sovereignty, national security, and economic development of the country.
• Recommendations by the RBI, the committee of experts led by Justice BN Srikrishna, the draft ecommerce policy and the draft report of the cloud policy panel show signs of data localisation.
• The extensive data collection by technology companies, has allowed them to process and monetize Indian users’ data outside the country. Therefore, to curtail the perils of unregulated and arbitrary use of personal data, data localization is necessary.
• Digital technologies like machine learning (ML), artificial intelligence (AI) and Internet of Things (IoT) can generate tremendous value out of various data. It can turn disastrous if not contained within certain boundaries.
• With the advent of cloud computing, Indian users’ data is outside the country’s boundaries, leading to a conflict of jurisdiction in case of any dispute.
• Data localization is an opportunity for Indian technology companies to evolve an outlook from services to products. International companies will also be looking at the Indian market, and this will benefit the growth of the local ecosystem.
• More data centres in India could mean new, power-hungry customers for India’s renewable energy market. That means Data localisation could boost India’s renewable energy.

Policies:

• The Srikrishna Committee wants to localise data for law enforcement to have easy access to data, to prevent foreign surveillance, to build an artificial intelligence ecosystem in India, and because undersea cables through which data transfers take place are vulnerable to attacks.
• Reserve Bank of India has also imposeda hard data localisation mandate on payment systems providers to store payment systems data only in India.
• Barring limited exceptions, telecom service providers are not allowed to transfer user information and accounting information outside India.

Challenges:

• Several of the recommendations in including the draft e-commerce policy, falter on a key ground like they gloss over the negative economic impact of data localization. This approach exhibits lack of evidence-based policy making.
• Having data in India does not mean that domestic companies will be able to access this data. Localization might aid the growth of the data centre and the cloud computing industry in India, but as matter of wider public policy, such an approach is extremely myopic.
• Mandating localization is less of a solution for data protection and might be less relevant to promote e-commerce.
• Given the comparative trade advantages enjoyed by one section of Indian industry in this context, mandating a strict data localization regime could be perceived as a restrictive trade barrier and spur retaliatory measures.
• There is a possible rise in prices of foreign cloud computing services in case of a data localisation, and its impact on MSMEs as well as start-ups relying on these services.
• The possibility of triggering a vicious cycle of data localisation requirements by other countries as a response to India’s possible data localisation will be detrimental for the global data economy.
• Growth will be restricted if data cannot be aggregated internationally. Infrastructure in India for efficient data collection and management is lacking.

Need of the hour:

• There is an urgent need to have an integrated, long-term strategy for policy creation for data localisation.
• Data localisation needs to integrate a wide range of social, political and economic perspectives.
• Creating an opportunity for local data centres all over the country.
• Devising an optimal regulatory and legislative framework for data processors and data centres operating in the country.
• Adequate infrastructure in terms of energy, real estate, and internet connectivity also needs to be made available for India to become a global hub for data centres.
• Adequate attention needs to be given to the interests of India’s Information Technology Enabled Services (ITeS) and Business Process Outsourcing (BPO) industries, which are thriving on cross border data flow.