Personal data protection: Firms need to do more

Corporations need to invest in cybersecurity to not only protect consumer data but also the business at large

As more Indian organisations move to the cloud, security breaches are likely to become frequent. A lack of legislation protecting personal data allows Indian organisations to collect data as they choose, often needlessly. The data is often sold, or monetised in other ways, and is frequently held in insecure servers. Suitable legislation has not been passed in the five years since the Supreme Court asked for it in a landmark case that upheld privacy as a fundamental right. This is a huge gap, which is at odds with policy initiatives to build Digital India. It opens the door to widespread