TRAI on July 16th issued its Recommendations on "Privacy, Security and Ownership of Data in the Telecom Sector".
In the aftermath of the Facebook-Cambridge Analytica data scandal and the release of GDPR rules in the European Union; privacy, consent, and data security have achieved a mainstream consumer interest narrative. India's vulnerability to Cyber Crime, continuous judicial activism post Aadhaar, and its sheer demographic scale has ensured this debate is as relevant on domestic shores. TRAI's recommendations act as a suitable reference point for things to come.
5 Key Takeaways:
1. The user owns his/her data; Entities (i.e. mobile devices, tablets, PCs, telecom service providers etc.) are mere "custodians" of data
2. Entities within the digital eco-system should be restrained from using Meta-data to identify users