The emerging framework for non-personal data protection in India: perils, promises, and lessons for the developing world

This chapter provides an overview of the proposals to regulate non personal data (NPD) in India as distinct from proposals to regulate personal data under a draft data protection law. It identifies the motivations for regulation and outlines and analyses proposals for a new regulatory framework for non-personal data proposed in 2020. Despite certain positive aspects in the recommendations of the committee, the chapter highlights how the scope of the recommendations may be impractical. The chapter also points to recent developments in proposed personal data legislation which suggest expanding the scope of the draft law to cover both personal and non-personal data. Thus, the future of the regulatory framework applicable to NPD remains uncertain.

The primary scope of application of the General Data Protection Regulation—Regulation (UE) 2016/679 (GDPR)—is ‘personal data’; ‘data’ that is not personal data can be freely processed within the legal framework of the Regulation (UE) 2018/1807. Although the European data protection framework recognises these two categories of data—‘personal data’ and ‘non-personal data’—reality reveals ‘a lot in between’ the opposite endpoints. There are accordingly considerable complications in drawing the boundaries between personal and non-personal data. In this article, we will review some of the main issues related to the usual classification of data as personal, anonymous, pseudonymous, de-identified data, and suggest that the most realistic way to approach the different problems is to recognise the dynamic nature of the data.

Jun-Jie Wu, Paul Barkley, and Bruce A. Weber (eds.). 2008. Frontiers in Resource and Economics: Human-Nature, Rural-Urban Interdependencies. Washington, D.C.: Resources for the Future, 266 pp., $85.00 (cloth), $41.95 (paperback). anthology Frontiers in Resource and Economics grew out of a symposium in honor of Emery N. Castle, Professor Emeritus at Oregon State University and Senior Fellow Emeritus at Resources for the Future. Professor Castle is the editor of, among other works, Changing American Countryside-one of the classics in the rural economics literature-and Economics and Public Water Policy in the West (co-edited with Stephen Smith). Additional contributors to Frontiers in Resource and Economics include environmental and resource economist V. Kerry Smith, economic geographer Maureen Kilkenny, and development sociologist David L. Brown, to name a few. book is highly recommended for the practitioner in either resource economics or rural economics. Although not every chapter will likely be of interest to all readers, there is enough variation to satisfy both the specialist and the generalist, the theorist and the practitioner. Castle's research encompasses natural resource, environmental, and community economics, and thus it is appropriate that both this anthology and the symposium it followed focus on the overlap among these three fields of study. editors tout the volume as exploring the between natural resource management and rural development as well as between rural and urban communities, and as such the book is divided into four parts: The Past 50 Years, Human-Nature and Rural-Urban Interdependence, Policies and Programs for People and Places, and The Next 25 Years. A difficulty in reviewing any anthology is to avoid the temptation to review each work in isolation, and instead to focus on the editors' difficult work in integrating each separate piece into a coherent whole. editors of Frontiers have an additional challenge-that of integrating threads of two overlapping yet distinct disciplines in rural economics/rural studies, and natural resource economics. editors succeed admirably in including works that explore the interdependencies of rural and urban areas and of natural resources and economic development, with Emery Castle and David Ervin providing a helpful synthesis at the beginning of the book. Each piece is interesting and thought-provoking in its own right, yet it is not recommended that the reader attempt to read the collection straight through from start to finish, as the chapters do not always follow each other seamlessly. This, of course, is a criticism that can be made of many other anthologies-it is not unique to this work. first section of the book, entitled The Past 50 Years, serves as an example of the challenges inherent in assimilating elements from these two sub-disciplines. It comprises two essays, one considering resource and environmental economic literature from 1950-2000, the second considering the literature and movement of rural economics from the early nineteenth century to the present. While different in scope and tone, both chapters end on a very similar note. Daniel Bromley, in The Emergence and Evolution of Environmental and Natural Resource Economics, accuses environmental and resource economists of becoming too hidebound-that is, that resource economists have become too wrapped up in their models and methods to continue to be relevant to the public. He questions whether they can bring new insights to the field, or anticipate economynature conflicts before they arise, given these economists' dependence on axioms. In short, he suggests that the field is becoming stagnant. Paul Barkley, in Rural Economics: People, Land, and Capital, also strikes a cautionary tone. He warns that Economists must be very careful in applying the interests and skills of their discipline to the problems of rural areas and rural communities? …

Data transmission is crucial in the digital age, making robust legal frameworks for data protection and the free flow of information essential. Distinguishing between personal and non-personal data is critical for ensuring regulatory compliance. Roles like controllers and processors define obligations and remedies, ensuring secure and lawful data handling. Based on the analysis of the European Union perspective on the aforementioned aspects, the paper provides implications for Vietnam in addressing the regulatory gaps regarding data-related laws in general and data transmission in particular.

The aim of this study is to gain insights into the attitudes of the population towards big data practices and the factors influencing them. To this end, a nationwide survey (N = 1,331), representative of the population of Germany, addressed the attitudes about selected big data practices exemplified by four scenarios, which may have a direct impact on the personal lifestyle. The scenarios contained price discrimination in retail, credit scoring, differentiations in health insurance, and differentiations in employment. The attitudes about the scenarios were set into relation to demographic characteristics, personal value orientations, knowledge about computers and the internet, and general attitudes about privacy and data protection. Another focus of the study is on the institutional framework of privacy and data protection, because the realization of benefits or risks of big data practices for the population also depends on the knowledge about the rights the institutional framework provided to the population and the actual use of those rights. As results, several challenges for the framework by big data practices were confirmed, in particular for the elements of informed consent with privacy policies, purpose limitation, and the individuals’ rights to request information about the processing of personal data and to have these data corrected or erased.

Introduction: Biobanks are a foundational infrastructure supporting research at scale and contributing to scientific progress. The increasing collection of samples and associated data presents challenges in terms of both physical and digital storage and handling. In North America and Europe health data protection frameworks have been in place for several years, regulating the use of collected personal data, including health care data, as those typically used by human biobanks. Yet, regulatory frameworks for biobanking, particularly in low- and middle-income settings, are highly fragmented, and little is known in this area. Objectives: This review focuses on identifying the health-related data protection frameworks in sub-Saharan African countries, as they are relevant to biobanking. Methods: We used complementary literature review approaches to ensure the completeness of our results for biobanking identified as "African," as well as for "disease-based," "country-based," and artificial intelligence-based approaches. Results: In total, 56 articles were identified and reviewed in full, 31 health-related acts and frameworks relevant to biobanking, and 24 general data protection acts and frameworks from 37 countries. In some countries, such as Kenya and Zambia, these acts were implemented, in some others, they were not. In most cases, as these regulatory frameworks have been recently created and implemented, there are little or no data relating to the impact of their implementation. Conclusion: Our findings confirm that regulatory frameworks for biobanking in sub-Saharan Africa are still in a consistent period of emergence, in an effort by national governments to address the existing fragmented landscape and support the development of research.

Hazardous waste capacity assurance planning: Volumes for one‐time remediation

Design principles for the General Data Protection Regulation (GDPR): A formal concept analysis and its evaluation

A Framework for Data Protection and Privacy in Data Service Centres in the Public Sector: A Case Study of a Security Organisation in a Developing Countries

Although AI is a helpful tool for the evolving business environment, its uncontrolled and fast integration into business processes can bring legal and ethical challenges. This research paper delves into the legal and ethical considerations essential for effectively regulating AI in business environments. As AI systems increasingly influence decisionmaking processes and operational efficiencies, the need for comprehensive and forward-thinking regulation becomes imperative. Thus, in the aspects of ethics, algorithms are utilized to protect rights or prohibit discrimination and ensure the openness of AI’s decisions. This paper examines key legal issues such as data privacy, intellectual property rights, and liability. For example, while the General Data Protection Regulation (GDPR) provides a framework for data protection, it remains unclear how these provisions apply to AI's sophisticated data handling and automated decision-making processes.. Ethical considerations further complicate the regulatory landscape. AI systems can inadvertently perpetuate biases present in their training data, leading to discriminatory practices and fairness concerns. This paper explores the ethical implications of such biases and the need for transparency in AI algorithms to ensure that they operate in a manner consistent with societal values. To address these challenges, the paper proposes a regulatory approach. It advocates for the modernization of existing legal frameworks to better encompass AI-related issues, and the establishment of ethical standards to guide AI deployment. Indeed, this article will explore some legal and ethical aspects of using Artificial Intelligence in the business world. Ethical AI guidelines and policies will be discussed, annual checkers will be conducted, and ethical AI standards will be promoted. In addition, identifying potential opportunities and threats likely to emerge when AI is even more entrenched in organizational activities will be relevant. After reviewing this article, you should know how to harness AI's power while avoiding legal issues.

This paper discusses the current state of the market conduct regulatory framework in the Kenyan financial services industry. The paper then progresses to carry out a comparative analysis of the Kenyan regulatory framework with the Canadian, UK and US market conduct regulatory frameworks. The comparative analysis will include the gaps in the Kenyan regulatory framework vis-à-vis the Canadian, UK and US markets. The paper also assesses the data protection legal framework in Kenya, its deficiencies and how this affects consumer protection. It then provides recommendations on how the Kenyan government agencies can cure the deficiencies noted. One of the crucially important learning points in this paper is the importance of data protection laws in ensuring consumer protection. A vital conclusion is how absolutely essential proactive regulator action on market conduct is in ensuring a robust market conduct protection framework. Such regulator action would be market conduct themed inspections that would lead to recommended actions to cure deficiencies to enhance the data protection framework. This paper also recommends that regulators in collaboration with government policymakers look at the emerging area of FinTech and examine the market conduct framework that should be put in place.

This chapter will discuss the legal framework for consumer and data protection in Europe. Central to this discussion will be the law of the European Union (EU) on data and consumer protection.3 Recent years have seen the creation of legal frameworks in Europe which seek to secure the protection of consumers while simultaneously facilitating economic growth in the European Union. This chapter will outline the main sources of law which protect consumers and their privacy. This chapter will outline the important provisions in these sources of law and critically analyse them. The chapter will also point up the gaps and deficiencies in the consumer and data protection legal structures.

The article provides a comprehensive analysis of the transformation of the European Union's regulatory framework in the field of digital regulation. It starts with the General Data Protection Regulation (GDPR) – despite its systematic nature, this document did not cover all the challenges arising from the rapid development of digital technologies. In response to new risks and needs, the EU has developed a series of supplementary regulations that detail and expand upon the GDPR's provisions, forming a multilevel architecture of digital governance. Notably, the Digital Services Act (DSA) establishes requirements for online platforms concerning content moderation, algorithm transparency, safeguarding user rights and granting access to data for research purposes. The Digital Markets Act (DMA) aims to limit the dominance of 'gatekeepers' – large technology companies that control access to key digital services – by introducing mandatory competition, transparency and interoperability rules. The Data Governance Act (DGA) establishes a foundation for a single data market by promoting the reuse of public sector data, developing intermediary services and encouraging altruism within the data sphere. The Data Act ensures fair access to data generated by connected devices and establishes control mechanisms, intellectual property protection and confidentiality regulations for data exchange between private and public entities. All of these acts have extraterritorial effect, cover both personal and non-personal data, and interact with the GDPR to create a horizontal regulatory system for the digital economy. Additionally, the article discusses the current VAT payment requirements for companies providing digital services to EU consumers. It provides an overview of the relevant regulations for both EU and non-EU residents that export digital products such as software, online courses, streaming services, and cloud computing. Special attention is paid to the taxation specifics for Ukrainian companies, including the registration requirements for non-residents in Ukraine and the exemption of B2B services from Ukrainian VAT. It also suggests practical recommendations for Ukrainian exporters on how to comply with tax regulations, keep records and adapt to European regulatory changes in the field of digital trade. In conclusion, this article shows how regulatory convergence within the EU is changing the way data is managed and how digital services and markets operate. This requires tools, procedures and terminology to be adapted by Ukrainian IT-companies to ensure compliance with modern digital requirements.

Enterprise data framework is the way of protecting various data or information in a systematic way. This is depicted strategic application in the way of major ethical practices in the company. The EDM structure of the company and this maintain data protection with various steps like, data identification, assigned compliance, tackling of different limitations, creation f report and sensitive data description. Researcher uses “interpretivism” research philosophy and “inductive” research approach to maintain proper strategy and process of work. Secondary data are collected by researcher with help of this qualitative research type. Several types of strategies related to data privacy protection are mentioned in this study. Financial and organisational losses are managed with help of this data protection framework. Authorisation and authentication are two types of data privacy processes globally. Data protection framework is also managed with the help of this privacy framework. 4 P’s of data privacy is also mentioned in this study. Security and compliance strategy is also mentioned here. Security threats and privacy threats are mentioned in this study.

Reeta Sony A.L - National Law University, New Delhi, India. E-mail:reeta.sony@nludelhi.ac.in.Sri Krishna Deva Rao - Professor, National Law University, New Delhi, India. E-mail: psrikrishnadevarao@gmail.com.Bhukya Devi Prasad - Council of Scientific and Industrial Research, New Delhi, India. E-mail: bdeviprasad@csir.res.in. Cloud computing refers to anything that involves delivering hosted services over the Internet. It is fast, cheap, flexible and elastic in nature. In spite of its benefits, cloud computing raises risks for data protection and privacy. One key issue presented by cloud computing is the fact that it changes our thinking of what we consider to be "our data" Data is no longer physically stored on a specific set of computers or servers, but is rather geographically distributed. The globalised nature of cloud computing poses a challenge for personal data protection, which requires a clear location for personal data, an identification of the processor and a responsible individual for data processing. Cloud data can be misused and/or shared with third parties without prior knowledge or consent of the data owner. The direct participation of an individual in transborder data transfer, third party participation in data storage, the processing and transmission of dataand, finally, negligence of data protection due diligence from cloud service providers, makes data protection and privacy laws more relevant. The recent PRISM surveillance programme scandal at the US National Security Agency (NSA) demonstrated the privacy risks that citizens around the world take on when their personal informa­tion is stored and processed in the cloud. This situation requires awell-established techno-legal solution along international standards. India, unlike the European Union, has no dedicated regulatory framework to deal with privacy and personal data protection. Although cloud computing is still in its initial stages in India, existing laws for people who are currently using facilities offeredby cloud service providers are extremely inadequate. However, cloud computing requires legal protection in India under the country's data protection laws, privacy laws and data breach laws, which must meet "international standards'! It is the right time for the Indian government to enact appropriate regulatory frameworks to protect personal data and privacy in the cloud era. The overall objective of this paper is to understand the impact of cloud computing on privacy and personal data protection and to analyse present legal frameworks governing privacy and personal data protection in India and Europe.