论文标题
对印度个人数据保护法案的技术查看
A Technical Look At The Indian Personal Data Protection Bill
论文作者
论文摘要
2019年印度个人数据保护法案提供了保护个人数据的法律框架。它以欧盟一般数据保护法规(GDPR)为基础。我们详细描述了该法案,与GDPR的差异,实施该法案的挑战和局限性。我们研究法案的技术方面,并提出了解决法案不同条款的方法。我们主要探索用于实施该法案的密码解决方案。这项研究有两个广泛的结果。首先,我们表明,对隐私的更好的技术理解对于清楚定义法案的条款很重要。其次,我们还展示了如何将技术和法律解决方案一起使用来执行该法案。
The Indian Personal Data Protection Bill 2019 provides a legal framework for protecting personal data. It is modeled after the European Union's General Data Protection Regulation(GDPR). We present a detailed description of the Bill, the differences with GDPR, the challenges and limitations in implementing it. We look at the technical aspects of the bill and suggest ways to address the different clauses of the bill. We mostly explore cryptographic solutions for implementing the bill. There are two broad outcomes of this study. Firstly, we show that better technical understanding of privacy is important to clearly define the clauses of the bill. Secondly, we also show how technical and legal solutions can be used together to enforce the bill.