One set of perhaps less foreseen stakeholders should also be paying attention to today's judgment by the CJEU tearing up the EU-US Privacy Shield agreement on data transfers:
Asia-Pacific govts involved in EU data protection adequacy status: Japan, S. Korea, and India
Asia-Pacific govts involved in EU data protection adequacy status: Japan, S. Korea, and India
With Japan, its about enforcement of its changes & if there really is remedy available to users on data protection harms, surveillance concerns.
S. Korea is still structuring its amended data protection legal framework. Also has taken radical surveillance steps during COVID19.
S. Korea is still structuring its amended data protection legal framework. Also has taken radical surveillance steps during COVID19.
India perhaps most vulnerable - but could also do the most. While its Sup Court upheld privacy as a fundamental right, exec & legislature are dragging things. Data protection bill still in Parliament - current text gives wide powers to executive, fails to create independent DPA
No measures taken on surveillance reform. Indian govt agencies across union and state govts can access a wide amount of data & sensitive communications, & increasingly doing so in rights harming ways. No judicial, independent oversight. Applies to all entities connected to India.
Indian citizens currently face an absence of remedy & independent oversight, let alone non-Indian persons other nationals. Former Supreme Court judge who chaired the govt's own most recent data protection advisory committee has criticize them, said surveillance state danger real.
And most recently, a problematic and confusing effort has been kicked about on govt regulating and ensuring local firms have access to "non personal data" - with lack of clarity on how it impacts already limited and confused enforcement of privacy interests of Indians.
