What is the difference between 'Sensitive Personal Data' and 'Critical' data?

 

This blog is written by the best lawyers in Delhi team. Personal Data is data that can be used to identify a person directly or indirectly. The proposed Indian Personal Data Protection Act 2019 broadly divides the two types of personal data into Sensitive and Critical. The Data Principal is the owner of the personal data and the Data Fiduciary is the person or entity responsible for determining how the personal data will be used, collected, stored, and processed.

 Personal Data are those parts that have been categorically marked or starred as 'CRITICAL' (Central Government of India) by the Central Government of India. This data cannot be transferred beyond the country's borders and should only be used within the nation. The exceptions to this rule are only in the following two cases: One is a transfer in place of prompt action to an individual providing medical or health services. The other is for a country, entity, or organization that has received the approval of the Central Government that it possesses adequate security according to the 'applicable law' (certainly referring both to the PDPA 2019 and presumably to the relevant data privacy laws of the country) as well as abides by the terms of International Agreements.

 Sensitive Personal Data refers to the portion of Personal Data that is considered sensitive. It can be used to harm a person's privacy if it is not handled carefully and with care. The Act mentions that the Act requires the careful handling of sensitive data. This is because of the potential harm to the privacy or safety of a data principal in the event of any misappropriation or mishap occurring during the course of fulfilling the purpose for which it was collected. Another reason is the expectation of the data principle that the authority processing such data will keep it confidential.

 A whole bunch of data relating to an individual is considered sensitive by the Act. This includes financial data, official identifiers, biometric data, and genetic, health or biological data. It also includes data on sexual orientation or gender status (mainly transgender or intersex), caste/class/tribe, and finally, political or religious beliefs or affiliations.

 With the help of this blog our Best Divorce lawyers in Delhi team try to clear your all doubts about personal data and critical data. Hope your doubts have been cleared when you will read this article. Our team also have written blogs on maintenance law and other topics.