During #HarGharTiranga, 5 Cr. Indians geotagged their homes & shared phone numbers. 6 Cr. uploaded their photos.
The campaign is over, but what will happen to the data?
Read about (surprise!) the lack of data protection & our demand for deletion 👇1/7 internetfreedom.in/har-ghar-priva…
After writing to the @MinOfCultureGoI on Aug 12, we sent a follow up letter on Sep 21, urging them to delete all data. We've also filed an RTI application asking whether the data has been deleted. 2/7
While the policy mentions that data will be deleted following the campaign, it continues to be available on the website. If the data hasn’t been deleted, it's a violation of the privacy policy. But it’s also concerning *because* of the privacy policy. 3/7
Some of our other concerns:
❗Cut-copy-paste
The vague and boilerplate privacy policy contains several clauses that seem to have nothing to do with the website or its purpose. 4/7
❗The kids are *not* alright
The Right to Privacy judgement established that greater care must be practised when dealing with the data of minors. However, the website allows anyone to upload a photo of themselves along with their name, which puts minors at risk. 5/7
We identified issues with the campaign on Aug. 6 after which the story received media coverage that highlighted the problems with the site. 6/7 restofworld.org/2022/would-you…
As we await a response from @MinOfCultureGoI, we will continue to track these developments and keep you informed. 7/7
• • •
Missing some Tweet in this thread? You can try to
force a refresh
We promised you a quick explainer on the Draft Indian Telecommunication Bill, 2022 yesterday & we’re here to deliver! It represents a missed opportunity for legislative reform to bring the Indian telecom sector into the 21st century. 1/5
Now every telecom service, including OTT communication services, will have to obtain a licence from the Central Govt. This includes WhatsApp, Signal, Jitsi, G-Meet etc.! A win for large telecom companies, a huge loss for user rights. 2/5
Clause 24(2)(a) expands the surveillance powers under the Indian Telegraph Act, 1885 (which authorised interception of messages transmitted through telegraphs) by extending it to “telecommunication services or network”, threatening End-to-End encryption. 3/5
Q: When did you last download an app with any idea of its impact on your privacy? (no cheating)
If you aren’t worried, you should be. Downloading apps can be like opening a can of worms
It’s important to know where you’ve downloaded an app from. While the Google & Apple app stores have standards & regulations in place to ensure safety to an extent, 3rd party app stores may not & thus need greater scrutiny. 2/9
2️⃣ ❌No data without permission❌
Apps require permissions to collect data from your phone. While some data is necessary for its functionality, always check what permissions an app is seeking to avoid overbroad collection of data. 3/9
The House Committee, constituted by the Andhra Pradesh (AP) State Assembly, formed to probe if the Telugu Desam Party (@JaiTDP) govt. used Pegasus, submitted its report yesterday. However, the report makes no reference to the spyware. 1/6
Per the Committee on ‘Unlawful Interception of Communications, Data Theft & Illegal Transmission, causing infringement of citizens rights during 2016-2019’, a large volume of data was transmitted from 18 State Data Centres (SDC) servers to external & unknown servers. 2/6
Head of the committee, MLA Bhumana Karunkar Reddy, said that there was no permissible presence or reason for such “unauthorised & improper transmission of large amounts of sensitive data”, shared between Nov 30, 2018 & Mar 31, 2019, from SDC servers to external IP addresses. 3/6
STATEMENT: The Criminal Procedure (Identification) Rules, 2022 have been notified.
They provide the procedure by which CPIA, 2022 will be enforced & have not provided sufficient safeguards to mitigate the risks and harms to the right to privacy caused by the CPIA (1/11)
As a recap - CPIA, 2022 considerably expanded:
👉The kind of data which could be collected (even blood samples!)
👉The people from whom it could be collected (anyone arrested under any law)
👉The period for which it would be stored (upto 75 years!) (2/11)
Rule 3 has limited the persons from whom measurements can be collected, but only to the extent that electoral offences and contempt-related offences require a Superintendent of Police’s approval for collecting measurement. (3/11)
Today marks the 5th anniversary of the landmark SC Right to Privacy judgement that changed digital rights history & finally recognised privacy as a fundamental right.
There has been some hope in Courts, where the judgement has formed the basis for decriminalizing same-sex relationships. It was also cited to incrementally advance jurisprudence on criminal investigations.
But India's data privacy under Puttaswamy remains under grave threat. 2/n
1⃣Withdrawal of the Data Protection Bill, 2021
While the Bill was not perfect, its withdrawal in the Lok Sabha means 4 years & multiple rounds of consultations have only led us to a road of disappointment, leaving a dangerous vacuum for data privacy. 3/n internetfreedom.in/here-lies-the-…
URGENT: As the alarming exercise of linking #aadhaarwithvoterid gains momentum throughout the country, here's a🧵+ shareable infographic with some steps you can take if a Booth Level Officer (BLO) comes to your door. Read on and share the right information now! 👇 1/n
1⃣Ask the BLO the following questions:
-Why are you asking me for my Aadhaar Number?
-I am already in the voter list and I have voted before. Why do you want to verify my identity?
-Is it compulsory for me to provide my Aadhaar Number?
(Contd. 2/n)👇
-Can I provide other documents such as PAN, Passport or Driving License to prove my identity?
-What happens if I don't provide my Aadhaar Number?
2⃣If the BLO insists, show them the following @ECISVEEP tweet on how Aadhaar-Voter ID link is voluntary. 3/n