Skip to main content

Ringfencing Data?—Perspectives on Sovereignty and Localisation from India

  • Chapter
  • First Online:
Blurry Boundaries of Public and Private International Law

Abstract

Governance of data, essentially a free-flowing product of the industrial (technology-driven) revolution 4.0, has been the subject of much discussion and policy action among States. Such governance, however, has presented questions turning the traditional understanding of the right to regulate, which is based on the geographic location, heads down, given that the task of establishing the location of the data and thereby its linkages with a specific territory is involuted and arduous. On the other hand, concerns remain about the privacy-related issues of the data, either located or handled overseas, thereby presenting difficulties in access and administration of data. This research addresses the model of governance of data via the path of data sovereignty and, therefore, insistence on data localization. It further presents the law in India, sparse as it is, through the lens of jurisprudence and law reform efforts, wherein the eagerness to ringfence the data is evident, even in disregard of the contractual obligations.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 129.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 169.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 169.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Notes

  1. 1.

    Interim orders in Balu Gopalakrishnan and others v State of Kerala and others W. P.(C). Temp. NO.84 OF 2020, https://globalfreedomofexpression.columbia.edu/wp-content/uploads/2020/05/Balu-gopalakrishnan-v-State-of-kerala.pdf accessed 21/09/2021. The Kerala High Court exercised jurisdiction despite the presence of a forum selection clause that vested jurisdiction in the courts of New York.

  2. 2.

    Circular on Storage of Payment System Data issued by India’s central bank, the Reserve Bank of India, dated 6th April, 2018. https://rbi.org.in/Scripts/BS_CircularIndexDisplay.aspx?Id=11244 accessed 17/09/2021.

  3. 3.

    Effective July 2021, the payments firm Mastercard has been barred from adding new customers in India thereby significantly impacting its business which otherwise covered a third of credit and debit card business in India. https://theprint.in/economy/what-is-data-localisation-why-mastercard-amex-diners-club-cant-add-more-customers-in-india/703790/ accessed 17/09/2021.

  4. 4.

    Haibach (2015) p. 252, 253–54.

  5. 5.

    Simpson (2016) P. 669, 670–73.

  6. 6.

    Ji (2020) p. 1283.

  7. 7.

    Uta (2007) p. 1, 4.

  8. 8.

    See, for example, the extensive guidance from UK in, Hale, T. et al., ‘ global panel database of pandemic policies (Oxford COVID-19 Government Response Tracker)’ (2021) 5, Nature Human Behaviour 529–538 (2021). https://doi.org/10.1038/s41562-021-01079-; on the position in India, https://vidhilegalpolicy.in/blog/indias-covid-19-response-calls-for-urgent-data-disclosure-norms/

  9. 9.

    Nectar (2020).

  10. 10.

    Rosalyn (1994) p. 56. For an extensive discussion on jurisdiction and competence, including a discussion on internet governance the following emblematic literature may be accessed. Thierer and Crews Jr (2003); Snijders and Weatherill (2003), Schiff (2002) p. 311, Smith, (2000) p. 229.

  11. 11.

    It is reported that by January 2021, internet connectivity covered 4.66 billion active internet users worldwide - 59.5 percent of the global population, a whopping 92.6 percent (4.32 billion) accessed the internet via mobile devices. https://www.statista.com/statistics/617136/digital-population-worldwide/ accessed 18/09/2021.

  12. 12.

    Jeff (2019).

  13. 13.

    Perry (2016).

  14. 14.

    David and David (1996) pp. 1367, 1402.

  15. 15.

    Mueller Milton (2019) pp. 1, 2; Shane (2000) p. 151.

  16. 16.

    Clinton and Gore Jr, ‘A Framework for Global Electronic Commerce’ https://clintonwhitehouse4.archives.gov/WH/New/Commerce/read.html accessed 21/09/2021.

  17. 17.

    Brief for Appellant at 3, Microsoft Corp. v United States (In re Warrant to Search a Certain E-Mail Account Controlled & Maintained by Microsoft Corp.), 855 F.3d 53 (2d Cir. 2017) (No. 14–2985). Interestingly, the pleadings by Microsoft or the arguments made within the amicus curiae brief submitted by Ireland (which argued that Ireland’s sovereignty was being threatened) did not refer to any specific law of Ireland being violated by compelling Microsoft to locally store emails in Ireland. Also see, Google Inc. v Equustek Sols. Inc., [2017] 1 S.C.R. 824, 828 (Can.) The court, reiterating the jurisdiction of Canadian courts, observed, “If Google has evidence that complying with such an injunction would require it to violate the laws of another jurisdiction, including interfering with freedom of expression, it is always free to apply to the British Columbia courts to vary the interlocutory order accordingly. To date, Google has made no such application.”).

  18. 18.

    UNGA Doc A/68/98, (2013) pp. 19–20.

  19. 19.

    UNGA Doc A/70/174, (2015) p. 13.

  20. 20.

    Ibidem, p. 23.

  21. 21.

    Tsaugourias (2015). Also see, Geoffrey (2007).

  22. 22.

    Kuehl (2009) pp. 1, 28.

  23. 23.

    Tsagourias (2018) pp. 523, 539.

  24. 24.

    Wu (1997) p. 647.

  25. 25.

    See, Clinton William and Albert (2000); Ironically, the United States pleaded for a regulation-free internet, premised on the inherent difficulty nature of the cyberspace and an idealism-driven motive to keep it free, and also an awareness of the difficulties in regulating cross-border activity. Referring to Bill Clinton’s comment that regulating the internet would be like ‘nailing jell-o to the wall, Laskai commented that in the initial years of the internet it was presumed that cyberspace would elude any efforts at territorialized regulation. Laskai (2016), Adam (2020) p. 87, Woods (2016) p. 729, 741.

  26. 26.

    Woods (2018) pp. 328, 352, Kerr (2015) pp. 285, 287–88.

  27. 27.

    Ibidem, p. 353.

  28. 28.

    Laskai, cit., see footnote n. 25. Laskai recalled that as early as 1997, attempts to regulate the internet by China through a multifaceted system of Internet censorship were noticed and critiqued as well, notably by Geremie R. Barmé and Sang Ye in an article they wrote for Wired magazine in 1997 who termed it as the Great Firewall.

  29. 29.

    See, generally, Broeders and van den Berg (2020), Schia and Gjesvik (2017).

  30. 30.

    Mueller Milton (2017).

  31. 31.

    Microsoft cit., see footnote n. 17. Note that this dispute saw amicus curiae briefs being filed on behalf of European Union, New Zealand, Great Britain, apart from Ireland.

  32. 32.

    Russia and China have been noted within the literature as being the early movers towards a positivist normative regime in international law, but their attempts were unsuccessful. See, Mačák (2016).

  33. 33.

    Ibidem, 127.

  34. 34.

    Tallinn Manual on International Law Applicable to Cyber Warfare (2013).

  35. 35.

    Osula and Rõigas (2016).

  36. 36.

    Macak, cit., see footnote n. 33.

  37. 37.

    Macmillan Inc. v Bishopsgate [1996] 1 WLR 387 (Eng.). see, Huang cit., see footnote n. 6, p. 1285.

  38. 38.

    Marcus (2020)

  39. 39.

    McKinsey (2016), According to McKinsey, it is estimated some 900 million people have international connections on social media, and 360 million take part in cross-border e-commerce. While digital technologies significantly enhanced the response mechanisms in combating the pandemic, they are also of immense value to the economic recovery. See, Marcus, cit., see footnote n. 38.

  40. 40.

    Huang, cit., see footnote n. 6, p. 1286; Also see, Mueller Milton (2020) p. 779. Mueller asserts that given cyberspace’s unique technical structure, it is best administered through an approach styled upon the idea of global commons.

  41. 41.

    Idem.

  42. 42.

    David and Federico (2016) p. 223.

  43. 43.

    GDPR, Regulation 2016/679, of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC, 2016 O. J. (L 119) 1 (EU), at art. 1.2; see Directive 95/46/EC, of the European Parliament and of the Council of 24 October 1995 on the Protection of Individuals with Regard to the Processing of Personal Data and on the Free Movement of Such Data, art. 1(1), 1995 O. J. (L 281) 31; Huang (n 6) 1287.

  44. 44.

    Article 16, TFEU is as follows,

    1. 1.

      Everyone has the right to the protection of personal data concerning them.

    2. 2.

      The European Parliament and the Council, acting in accordance with the ordinary legislative procedure, shall lay down the rules relating to the protection of individuals with regard to the processing of personal data by Union institutions, bodies, offices and agencies, and by the Member States when carrying out activities which fall within the scope of Union law, and the rules relating to the free movement of such data. Compliance with these rules shall be subject to the control of independent authorities. Consolidated Version of the Treaty on the Functioning of the European Union (TFEU) art. 16, Oct. 26, 2012, O. J. (C 326) 47. https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:12012E/TXT:en:PDF accessed 10/10/2021.

  45. 45.

    Warren and Brandeis (1890) pp. 193, 195–96.

  46. 46.

    US Privacy Act, 5 U.S.C. § 552, 552a (as amended) https://uscode.house.gov/view.xhtml?req=(title:5%20section:552a%20edition:prelim accessed 12/10/2021; Raul, et. al, (2014) p. 268, 269.

  47. 47.

    Roe v Wade, 410 U.S. 113, 153 (1973) at [78] https://www.law.cornell.edu/supremecourt/text/410/113 accessed 12/10/2021. In Whalen v Roe 429 U.S. 589, 605–06 (1977) while the Supreme Court of the United States outlined a right to “information privacy” in the Fourteenth Amendment, nevertheless upheld a New York statute that mandated identification of records of physicians and patients in with regard to certain specified drug prescription records. https://supreme.justia.com/cases/federal/us/429/589/ accessed 24/09/2021.

  48. 48.

    See, for instance, Am. Fed’n of Gov’t Emps. v Dep’t of Hous. & Urban Dev., 118 F.3d 789, 791 (D. C. Cir. 1997).

    https://casetext.com/case/american-federation-of-gov-employees-v-hud?__cf_chl_jschl_tk__=pmd_9eSHLg6DS0D01ybjR66cJ_aoCoqugd3bo0IwftuNnNg-1632570610-0-gqNtZGzNAlCjcnBszQuR accessed 25/09/2021.

  49. 49.

    See, generally, Paul M. Schwartz, (1995) p. 553, 574–82.

  50. 50.

    Liquormart, Inc. v Rhode Island, 517 U.S. 484, 503, 116 S. Ct. 1459 (Opinion of Stevens, J.) The Judge observed, ‘‘The First Amendment directs us to be especially sceptical of regulations that seek to keep people in the dark for what the government perceives to be their own good.”.

  51. 51.

    Sorrell v IMS Health Care, 564 U.S. 552, 561 (2011) wherein the Court heard a plea of first amendment violation by the Vermont Prescription Confidentiality Law that prohibited disclosure or otherwise allowing pharmacies to share prescriber-identity information with anyone except for marketing reason. https://www.supremecourt.gov/opinions/10pdf/10-779.pdf accessed 24/09/2021.

  52. 52.

    Ibidem, 560.

  53. 53.

    Huang, cit., see footnote n. 6, p. 1289.

  54. 54.

    Benjamin Haas (2017).

  55. 55.

    E-Commerce Law of the People’s Republic of China (Adopted at the Fifth Session of the Standing Committee of the 13th National People's Congress on August 31, 2018) https://ipkey.eu/sites/default/files/documents/resources/PRC_E-Commerce_Law.pdf accessed 10/10/2021; Huang, cit., see footnote n. 6, p. 1289.

  56. 56.

    Adopted at the Third Session of the Thirteenth National People’s Congress on May 28, 2020.

    http://www.npc.gov.cn/englishnpc/c23934/202012/f627aa3a4651475db936899d69419d1e/files/47c16489e186437eab3244495cb47d66.pdf accessed 11/10/2021.

  57. 57.

    Huang, cit., see footnote n. 6, p. 1290.

  58. 58.

    Sherry and Nolan (2015).

  59. 59.

    Ye Zhu v Baidu, Nanjing Intermediate People’s Court (2014) Ning Min Zong Zi No. 5028. See, Ken Oliphant et al. (2018) pp. 1, 2.

  60. 60.

    Huang, cit., see footnote n. 6, p. 1294.

  61. 61.

    Christopher (2011).

  62. 62.

    Mitchell and Hepburn (2017) p. 182, 186; Shahmel and Christopher (2016) p. 11.

  63. 63.

    Gopalakrishnan et. al. v State of Kerala et. al. cit., see footnote n. 1.

  64. 64.

    Ibidem, 6.

  65. 65.

    Idem, 2.

  66. 66.

    Idem, 10.

  67. 67.

    Idem, 11.

  68. 68.

    Idem, 21.

  69. 69.

    Idem, 23.

  70. 70.

    Justice K.S. Puttaswamy (Retd.) v Union of India & Ors. Writ Petition (Civil) No. 494 of 2012 & connected matters, https://main.sci.gov.in/supremecourt/2012/35071/35071_2012_Judgement_26-Sep-2018.pdf accessed 21/09/2021.

  71. 71.

    Constitution of India (1950)

  72. 72.

    For a detailed discussion, see, ELP Discussion Paper: Justice BN Srikrishna Committee - White Paper on Data Protection (2017).

    https://elplaw.in/wp-content/uploads/2018/08/ELP-Discussion-Paper-Justice-BN-Srikrishna-Committee-Data-Protection-2.pdf accessed 11/10/2021.

  73. 73.

    Ibidem.

  74. 74.

    Vrinda et al. (2017).

  75. 75.

    Other regulatory mechanisms addressing data governance in India include,

  76. 76.

    The Committee of Experts on a Data Protection Framework for India (2018).

  77. 77.

    Telecom Regulatory Authority of India Recommendations on Privacy, Security and Ownership of the Data in the Telecom Sector (2018).

  78. 78.

    Report of the Group of Experts on Privacy (2012)

  79. 79.

    The Personal Data Protection Bill (2019).

  80. 80.

    For a detailed discussion, see, ELP Discussion Paper, cit. footnote n. 72.

  81. 81.

    For a detailed discussion, see, Chacko and Misra, ‘India—Data Protection Overview’ (2021) https://www.dataguidance.com/notes/india-data-protection-overview accessed 12/10/2021.

  82. 82.

    Idem.

  83. 83.

    Regulatory Divergence: Costs, Risks, Impacts: An International Financial Sector Study by Business at OECD and the International Federation of Accountants (2018) p. 5.

  84. 84.

    David (2020).

  85. 85.

    Idem.

  86. 86.

    For a detailed reading of the OECD’s work on Privacy law see, The OECD Privacy Framework (2013).

  87. 87.

    Measuring the Economic Value of Data and Cross-Border Data Flows: A Business Perspective (2020) p. 28.

  88. 88.

    Casalini and González (2019).

  89. 89.

    Mattoo and Wunsch (2004) p. 765.

  90. 90.

    Article 40 of the draft Personal Data Protection Bill states: ‘Every data fiduciary shall ensure the storage, on a server or data centre located in India’.

  91. 91.

    GDPR, Article 47.

  92. 92.

    UNGA, cit. footnote n.19&20.

  93. 93.

    Liisi (2020).

  94. 94.

    Idem.

References

Download references

Acknowledgements

This research is supported by the Indian Development Fund 2020-2021.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Sai Ramani Garimella .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2022 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.

About this chapter

Check for updates. Verify currency and authenticity via CrossMark

Cite this chapter

Garimella, S.R., Parthiban, B. (2022). Ringfencing Data?—Perspectives on Sovereignty and Localisation from India. In: Sooksripaisarnkit, P., Prasad, D. (eds) Blurry Boundaries of Public and Private International Law. Springer, Singapore. https://doi.org/10.1007/978-981-16-8480-7_14

Download citation

  • DOI: https://doi.org/10.1007/978-981-16-8480-7_14

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-16-8479-1

  • Online ISBN: 978-981-16-8480-7

  • eBook Packages: Law and CriminologyLaw and Criminology (R0)

Publish with us

Policies and ethics