Srikrishna Committee
The pivotal committee whose report shaped the modern DPDPA.
🎯 Learning Objectives
- ▸ Understand the mandate of the Srikrishna Committee
- ▸ Analyze the core recommendations
- ▸ Understand its impact on the DPDPA
The Mandate
In the landmark Puttaswamy judgment (2017), the Supreme Court directed the government to establish a robust data protection regime. The government responded by forming a 10-member committee led by Justice B.N. Srikrishna.
The committee was tasked with studying global laws (like GDPR) and recommending a framework for India that balances privacy with innovation.
The Srikrishna Report & Draft Bill
In July 2018, the committee released its famous report and the draft Personal Data Protection (PDP) Bill. Key features included:
- • Establishment of a Data Protection Authority (DPA).
- • Data localization requirements (storing a copy of data in India).
- • Strong rights for data principals (fiduciaries).
- • Consent as the primary basis for processing.
The draft bill was a massive 180-page document. It was considered too complex and heavily regulated. However, it set the stage for the DPDPA.
📖 Glossary
- Data Localisation
- The practice of storing data within a country's borders to ensure jurisdiction and security.
🔑 Key Takeaways
- Formed in 2017, chaired by Justice B.N. Srikrishna.
- It produced the draft Personal Data Protection (PDP) Bill, 2018.
- It introduced concepts like Data Protection Authority, data localization, and consent managers.
📚 Further Reading
- A Free and Fair Digital Economy — MeitY (2018)

Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...