01 Feb CitiBank Defines Customer Personal Information Rights in Reply to TRAI
In its reply to the open consultation on data protection by the Telecom Regulatory Authority of India (TRAI), Citibank clarified that information such as call detail records, location data, and app usage should be considered as personal information under the IT Act, 2000 & its Rules, 2011.
Additionally, the bank said that the individual’s rights to his personal data cannot be superseded by the data controller, and added that obtaining consent is essential before sharing the customer’s data according to the Choice and Consent (opt-in/opt-out) under National Level Privacy Principles as recommended by the Justice Shah committee.
Citibank also recommended the creation of a data sandbox for anonymized data sets of regulated companies under the purview of the government to bring a number of private stakeholders under legal and regulatory control.
Source: Medianama
