Breach Of Personal Data Held By The State: Critical Considerations In The Breach Notification Process Under India’s Upcoming Data Protection Law
Instances such as government databases being left open without requiring password access, criminals selling access to government databases for ‘sessions of 10 minutes’ and botched procedures leaking data have made breach of personal data held with the State business as usual. A report by World Economic Forum (2019) stated that UIDAI – the principal Aadhaar implementing agency has had its database incessantly breached since inception, compromising sensitive personal data of over 1.1 billion Indians.