Digital privacy an engineering challenge, not a user-level issue, says scientist at IT ministry

In a recent address at Google's 'Safe and Trusted AI' event, a senior official from India's Ministry of Electronics and Information Technology (MeitY) emphasized the necessity of addressing digital privacy concerns at the engineering level rather than shifting the responsibility onto end users. Vikash Chourasia, a scientist at MeitY, asserted that the implementation of privacy-enhancing technologies (PETs) is crucial for safeguarding personal data and fostering trust in digital systems. Chourasia highlighted that PETs serve as fundamental tools designed to protect user information while interacting with digital platforms. By employing strategies such as encryption, anonymization, and differential privacy, these technologies aim to minimize data collection and sharing, ensuring that user data remains confidential by default. He pointed out that resolving privacy issues should primarily focus on engineering solutions rather than placing the onus on users, who may struggle to navigate complex privacy mechanisms. To illustrate this, he referenced the use of one-time passwords (OTPs), explaining that the effectiveness of such security measures can diminish if they are not properly integrated. Historically, OTPs offered an additional layer of security by being sent to a separate device, but the current trend of accessing banking services and OTPs on the same device has compromised their reliability. Chourasia also touched on India's recent announcement of data protection regulations under the Digital Personal Data Protection Act (DPDP). He mentioned that MeitY's immediate goal is to advocate for the adoption of PETs in collaboration with academic institutions and industry stakeholders. He described India as a 'privacy-conscious society' and encouraged businesses to view compliance with privacy regulations not just as a requirement, but as a chance to enhance trust and competitive edge. Additionally, he underscored the potential of open-source technologies and local innovations, suggesting that small and medium enterprises could utilize these tools to bolster their privacy and security frameworks. MeitY intends to establish further collaborations with academic partners, with upcoming meetings scheduled in Chennai aimed at promoting awareness and building capabilities surrounding the implementation of PETs.