New Delhi (Sputnik) — Dr. Rakesh Goyal, the director general of the Centre for Research and Prevention of Computer Crimes, told Sputnik that international companies, corporations and banks do not fully cooperate with Indian regulators and law enforcement agencies during investigations and hence the financial regulator has been resisting US global lobbying for easing local data storage norms.
Sputnik: Why is India insisting on the local storage of consumer and client data?!
Dr. Rakesh Goyal: The genesis of keeping data within Indian legal jurisdiction is the challenge RBI and Indian LEAs (law enforcement agencies) faced when investigating a fraud that happened in a European bank somewhere around 2012. The data was kept in Europe. The bank management in Europe had not cooperated as required. Then RBI enforced somewhere in 2012-13 that all Indian banking data has to be kept within geographic territorial boundaries of India and it has to be subject to Indian legal jurisdiction. I believe that this is a valid sovereign and legal requirement. This has now extended to insurance, telecom, payment services, digital signatures, etc.
Dr. Rakesh Goyal: These international companies, corporations and banks do not fully cooperate with Indian regulators and LEAs for various investigations. This includes not only banking but free email providers, social media companies, cryptocurrency, etc.
Thus, if these companies, corporations and banks want to do business in India, they must be exposed to the Indian legal and regulatory system. Take it or leave it. It is a very valid requirement. They do it under Chinese and European (under GDPR and other regulations) jurisdictions, so why crib in India?
Sputnik: Does this localization move completely address the concerns of the Indian side on the data storage issue?
Sputnik: Is there a possibility that these companies may keep a mirror data with them abroad?
Dr. Rakesh Goyal: If these companies, corporations and banks have any concern about the above then their intention may be questionable. If they keep mirror data out of India for their records/ regulatory requirements/analysis, it will not be possible to force them to abide by Indian SPDI and other concerns.
The views and opinions expressed by Dr. Rakesh Goyal in this article are those of the speaker and do not necessarily reflect the position of Sputnik.