Research Objectives and Our Methodology

Our overall objective in this study is to kick-start an enterprise-centric debate on data privacy in India

The past few years have seen a growing global interest in data privacy. Given recent high-profile data breaches across the world, and in India and heightened regulatory action in the European Union (through GDPR), the privacy discourse is picking up pace in India as well.

Key objectives of the study

In the context of the increasing resonance of data privacy as a key topic of debate across the world, our research is aimed at developing an objective baseline of data collection, usage, and handling practices in Indian private enterprises, and charting an actionable privacy roadmap for key stakeholders in India. Our overall study is aimed at achieving four specific objectives: 1. Developing an objective baseline of the current landscape of personal data in India 2. Identifying the risks and challenges associated with personal data in India 3. Defining actionable recommendations for key stakeholders, including Indian private enterprises, investors, consumers/civil society, and regulators 4. Contributing to the public discourse on data privacy in the age of AI and Big Data

Methodology

The overall research process was led by Monitor Deloitte, in collaboration with Omidyar Network India. We adopted a combination of primary (qualitative and quantitative) and secondary research methodologies to generate and aggregate insights on data practices in India from a multi-stakeholder point of view. We conducted over 50 in-depth primary stakeholder interviews across Indian private enterprises, investors, regulators, and privacy experts. We also conducted a survey to understand the attitude and beliefs of individuals on data privacy. The primary research has been supported by an extensive meta-analysis of existing research published in the form of media reports, news articles, research papers, academic reports, and regulatory papers.