Digital Personal Data Protection Act and Disability Rights

The Digital Personal Data Protection Act, 2023 (DPDP Act) is a significant piece of legislation in India. Its purpose is to regulate how digital personal data is processed, ensuring a balance between individual rights and the necessity for lawful data processing. Recently, the Ministry of Electronics and Information Technology (MeitY) has been engaging with the public to gather feedback on the draft rules related to this Act. Disability rights activists have expressed concerns about a particular provision that they feel compromises the autonomy of Persons with Disabilities (PwDs).
Key Provisions of the DPDP Act
Under the DPDP Act, data fiduciaries are obligated to obtain verifiable consent from the guardian of any child or adult with disabilities (PwD) before they can process personal data. This requirement is detailed in Section 9(1) of the Act. The Act characterizes data fiduciaries as those who handle personal data, while data principals are the individuals whose data is being gathered.
Concerns of Disability Rights Activists
Activists argue that Section 9(1) infantilises PwDs. It assumes that having a legal guardian equates to an inability to make decisions, which contradicts the principles of self-determination. They contend that this provision could restrict PwDs’ access to digital platforms, thereby infringing on their rights.
The Role of Guardians in Disability Rights
Legal guardianship for persons with disabilities (PwDs) is regulated by two main laws: the Rights of Persons with Disabilities Act, 2016 (RPWD Act) and the National Trust for the Welfare of Persons with Autism, Cerebral Palsy, Mental Retardation, and Multiple Disabilities Act, 1999 (NT Act). The RPWD Act permits limited guardianship, which aids PwDs in making certain legal decisions, whereas the NT Act establishes full guardianship. This distinction often leads to confusion regarding the roles and responsibilities of guardians.
Implementation Challenges
The draft rules under the DPDP Act attempt to clarify how consent should be obtained from guardians. However, the lack of illustrative examples for PwDs raises doubts about practical implementation. Activists stress the need for clear guidelines to ensure that guardianship does not compromise the autonomy of PwDs.
Intersectionality and Digital Rights
When we consider intersectionality, issues related to gender and disability become significant. For instance, a woman with a disability may need a guardian’s consent to order sanitary products online. This restriction can limit her access to necessary services, raising doubts about whether the DPDP Act effectively protects the rights of all individuals with disabilities.
Data Privacy and Legal Responsibilities
Activists worry about the legal obligations placed on guardians regarding consent for data processing. Questions arise about the implications of guardianship on data privacy and the potential for conflicts of interest. If guardians act in their own interests, it could undermine the rights of the PwD they represent.
Accessibility of Digital Platforms
Despite the legal frameworks established, accessibility remains barrier for PwDs. A recent evaluation revealed that many popular digital platforms lack adequate accessibility features. This issue complicates the implementation of the DPDP Act, as inaccessible platforms can prevent PwDs from exercising their rights.