Govt Takes A Stand On Data Privacy: Restricts The Unauthorized Use Of Pan Card Details

In an important step towards protecting citizen data, India's Ministry of Home Affairs (MHA) has directed the Indian Cyber Crime Coordination Centre (I4C) to address increasing unethical use of personal data.

As per a Times of India Report, I4C has directed the Income Tax department to restrict unauthorized database access, focusing especially on fintech companies who have been actively involved in the data-harvesting practices. These companies have frequently used citizens' PAN (Permanent Account Number) data to access sensitive information such as full names, addresses, and phone numbers to create customer profiles and offer personalized products , like personal loans. These practices, which were not explicitly authorized, have raised serious concerns regarding the security of sensitive data. This misuse of data is against the law and could provide significant risk to individuals' privacy.

The Digital Private Data Protection Act (DPDP)

Today, as people rely more and more on digital services, the amount of personal data obtained by numerous companies has increased exponentially. However, with this increase in data comes the urgent need to ensure that citizens' personal information is protected from misuse. In response to this growing concern, the Government of India is preparing to implement the Digital Private Data Protection Act (DPDP), 2023, which aims to protect personal information and regulate data use across industries.

The law mandates companies and other entities to only access personal data when absolutely necessary and with the explicit consent of the individual concerned. This ensures a high level of transparency, as organizations must declare how and why they gather and use personal information. With the DPDP Act set to take effect these strict rules, India is taking a big step toward digital privacy, gaining greater control over how personal information is managed. The recent crackdown on unethical use of PAN data can be seen as part of the government's bigger objective to regulate how all types of personal data are accessed and shared across the country.

A Larger Strategy for Data Protection

These new restrictions are expected to have a major impact on the fintech industry. Many digital finance companies have been using their access to personal data to build algorithms that provide personalized services and fast credit approvals. Companies will now face increased scrutiny for their data access methods as stricter checks are implemented.

Recently, as per reports, the National Payments Corporation of India (NPCI) directed banks to block illegal access to the Unified Payments Interface (UPI) database, in order to tighten the regulatory practices.