State the applicability of Personal Data Protection Bill, 2019 and what are the rights of an Individual and what are the obligations of Data Fiduciary under this Bill.

The Personal Data Protection Bill, 2019 was introduced in Lok Sabha on December 11, 2019. The Bill seeks to provide for protection of personal data of individuals, and establishes a Data Protection Authority for the same. Applicability: The Bill governs the processing of personal data by: Government, Companies incorporated in India, and Foreign companies dealing with personal data of individuals in India. Obligations of data fiduciary: A data fiduciary is an entity or individual who decides the means and purpose of processing personal data. Such processing will be subject to certain purpose, collection and storage limitations. For instance, personal data can be processed only for specific, clear and lawful purpose. Additionally, all data fiduciaries must undertake certain transparency and accountability measures such as: implementing security safeguards (such as data encryption and preventing misuse of data), and instituting grievance redressal mechanisms to address complaints of individuals They must also institute mechanisms for age verification and parental consent when processing sensitive personal data of children. Rights of the individual: The Bill sets out certain rights of the individual (or data principal). These include the right to: obtain confirmation from the fiduciary on whether their personal data has been processed, seek correction of inaccurate, incomplete, or out-of-date personal data, have personal data transferred to any other data fiduciary in certain circumstances, and restrict continuing disclosure of their personal data by a fiduciary, if it is no longer necessary or consent is withdrawn.