Key takeaways: Government has carte blanche: Both Personal Data Protection Bill, 2019 and the expert committee report on Non Personal Data give the government wide-ranging powers to collect and analyse data, without adequate safeguards GDPR not ‘revolutionary’: GDPR only evolved existing privacy and data protection laws, it did not radically alter how companies collect and use data Inferred data needs to be dealt specifically: There is a need to strenghten specific provisions to safeguard individual libery and community rights when it comes to inferred data Privacy within context of hierarchies: Need to think of privacy within contexts and in terms of hierarchies, when swathes of data are analysed by artificial intelligence and automated tools