Unreasonable surveillance by government or private agencies should be listed as a specific harm that can be caused to citizens in the new law

There should be a specific distinction between personal data and sensitive personal data in the new law

Personal data of Indian citizens can be stored in other countries and not in India

If a citizen’s personal data is breached by negligence of the data fiduciary (entity that stores your data) and some harm is caused to them, a citizen need not get compensation for it

Reena shares her name and mobile number to login to online reservation booking app for restuarants. The restaurant should take her permission for using her details again for every reservation

Even in cases of medical emergencies, express consent of a person or their representative needs to be taken before using/processing their personal data.

If a citizen has given their personal data to a website for specific purpose, they cannot ask for that data to be erased after the purpose has been fulfilled.

If a website faces a data breach and a citizens data is compromised, the website need not inform the citizen