Consent Forms for Personal Data

 

 

Dear Shri Ashvini Vaishnawji ,

 

In my earlier email ( Dashboard for Data Owners / 04 Aug 2023 ) , I had

suggested :

To ensure that the Data Fiduciary collects only that data which it requires to

deliver SPECIFIC SERVICE ,

 #  DATA PROTECTION BOARD must Mandate use of only that FORM ( for each

     “ nature “ ) which the BOARD has designed ( data fields )

     

This is not a big deal .

Underneath, I have listed ( though not comprehensive ), data-fields required

 for 10 different DATA FORMS , which Data Protection Board must

STANDARDIZE and mandate the “ Data Fiduciaries “ to display on their portals

But then, there could be thousands of “ Data Fiduciary “ ( websites / portals of

 Social Media – E Commerce – Banks – Fintech – Central / State Govt Agencies –

 Departments – Search Engines – Buy / Sell platforms – Private Companies –

 Service Providers – Hospitals etc )

It is going to be difficult to ensure / monitor that each of these, use the DPB

 mandated forms

Let us not forget, that ALL fiduciaries MAY NOT need ALL types of data about a

 person. Each may use a different  COMBINATION of these 10 forms , to deliver

 some specific service

Also think of the pain of the 1400 million Data Owners

They would be required to fill in their “ SAME “ Personal Data , again and again, (

 although in identical / standard FORMS ) , in thousands of websites !

They are bound to make mistakes !

I understand, DPDP Bill has made provision for CONSENT MANAGERS , whom

 Data Owners may “ authorize “ to “ manage “ their personal data . I think

 hundreds of Consent Managers will crop up soon

I suppose this means :

 

Ø  A Data Owner need NOT fill in those ( 10 or less ) DATA FORMS on

    thousands of portals of Data Fiduciaries, but she need to fill in those FORMS

    , on only ONE portal viz; portal of a CONSENT MANAGER

 

Ø  She will then “ authorize “ that CONSENT MANAGER to “ share “( when

    requested ), her “ specific data “ to each specific “ Data Fiduciary “ (

    hundreds of Permutations / Combinations )

 

Ø  A Data Owner will ( presumably ) require to pay a small FEE to the Consent

   Manager, to manage her data

I suppose, if a Data Owner is NOT satisfied with the service of a given Consent

 Manager, she would have a right to select another Consent Manager.

What happens in such a case ?

 

Would she need to “ re-enter “ her Personal Data ( 10 Forms ? ) all over again on

 the portal of the new Consent Manager ?

OR,

Would Data Protection Board , direct the first Consent Manager to automatically

 TRANSFER user data to the second Consent Manager ?

 

(  For Diagram, refer 

>   Released : Govt Policy for Selling Personal Data   ….  05 Sept 2020 )

 

 

Now, consider how SIMPLE life will become for all :

#  Data Owners ( Data Principals – 1400 million Indian citizen )

#  Data Fiduciaries ( thousands of websites )

#  Data Protection Board

-      If there was ONLY ONE , Consent Manager !

 

All Indian Citizen to furnish their personal data on only  ONE portal , owned and

 operated by the Data Protection Board ?

Dear Ashwini Vaishnawji ,

 

To vastly simplify the lives of , not only millions of citizen but also of thousands of businesses, please consider my following past e-mails :

 

 

Digital Dividend from Demographic Data [ 4 D ]……………………. 14 Feb 2019 

 

Only Answer : a Statutory Warning   ……………………………………………… 10 Nov 2018 

 

SARAL  [ Single  Authentic  Registration ( for )  Anywhere  Login ]  10 Feb 2019 

 

 

With regards,

Hemen Parekh

www.hemenparekh.ai  /  06 Aug 2023

PS :

Even if Data Protection Board , launches tomorrow that one CENTRAL portal

where all Indian citizen can submit their COMPREHENSIVE personal profile (

consisting of all 10 Data Forms ), it will take DECADES

But with rapid advances in Artificial Intelligence , it is now possible to

CONSOLIDATE personal data of ALL of our citizen ( lying scattered on thousands

 of sites of Data Fiduciaries ), in a matter of weeks !

 

Cannot believe ?  Please read :

Ø   I am One , I will become Many………………………….. 06 Jan 2020

Ø  India embraces SUIIC : re-named as NATGRID .. 27 Apr 2023

 

 

 

( A )  Personal Data

·        First name

·        Last name

·        Date of birth

·        Gender

·        Occupation

·         

·        ( B )  Contact Data

·        Email address

·        Phone number

·        Address

·        City

·        State

·        Zip code

·        Country

·         

 

( C )  Family Data

·        Parents' names: 

·        Siblings' names: 

·        Marital status: 

·        Spouse's name: 

·        Children's names: 

·        Date of birth :      of each family member.

·        Gender:               of each family member.

·        Occupation:        of each family member.

·        Remarks:            additional information

 

( D )  Social Media Data

·        Social media platforms:  that the person uses.

·        Usernames:  that the person uses on each social media platform.

·        Privacy settings:  that the person has set for their social media accounts.

·        Remarks:  additional information

 

( E )  Cultural Exposure Data

·        Travel history:  countries that the person has visited.

·        Languages :  that the person speaks.

·        Cultural events :  that the person has attended.

·        Remarks: additional information

 

( F )  Educational Qualification Data

·        Name of the educational institutions: that the person was enrolled

·        Degree or diploma:  that the person was awarded.

·        Field of study:  that the person focused on.

·        Dates of attendance:  the start and end dates of the person's enrolment.

·        Grade point average (GPA):  person's academic performance.

·        Honors or awards: any honours or awards that the person received

·        Remarks:  additional information

 

( G )  Languages Known Data

·        Native language:  the person's native language.

·        Other languages known:  that the person knows.

·        Level of fluency:  that the person has in each language.

·        Remarks:  additional information

 

( H )  Job Experience Data

·        Job titles :  that the person has held.

·        Company name:  names of the companies that the person has worked for.

·        Dates of employment:  start and end dates of the person's employment at

                                              each company.

·        Duties and responsibilities:  the duties and responsibilities that the person

                                                       had in each job.

·        Remarks:  additional information

 

 

( I )  Wealth and Income Data

·        Annual income:  the person's annual income.

·        Assets:  the person's assets, such as their home, car, and investments.

·        Debts:  the person's debts, such as their mortgage, car loan, and credit card

                      debt.

·        Remarks: additional information

 

( J )  Medical History Data

·        Current health status:  the person's current health status.

·        Past medical history:  the person's past medical history, such as any

                                             surgeries or illnesses

·        Current medications:  the person is currently taking.

·        Allergies:  any allergies that the person has

·        Remarks:  additional information