Lok Sabha Question No. 3550 (UNSTARRED), answered on 2023-03-22
Subject: e-Commerce Platform
Ministry: COMMERCE AND INDUSTRY
Asked by: Rahul Ramesh Shewale, Chandra Sekhar Sahu, Girish Bhalchandra Bapat, Pritam Gopinath Munde

## GOVERNMENT OF INDIA MINISTRY OF COMMERCE & INDUSTRY DEPARTMENT FOR PROMOTION OF INDUSTRY AND INTERNAL TRADE

## LOK SABHA

UNSTARRED QUESTION NO. 3550.

TO BE ANSWERED ON WEDNESDAY, THE 22 ND  MARCH, 2023.

## E-COMMERCE PLATFORMS

3550.  SHRI RAHUL RAMESH SHEWALE: SHRI CHANDRA SEKHAR SAHU: SHRI GIRISH BHALCHANDRA BAPAT: DR. PRITAM GOPINATHRAO MUNDE:

Will the Minister of COMMERCE AND INDUSTRY be pleased to state:

## वाणिज्य एवं उद्योग मंत्री

- (a) the details of the policies and rules that govern the ownership, access, storage, use and sharing of data generated on e-commerce platforms;
- (b) whether the Government is planning to formulate guidelines regarding the use and sharing of data generated on e-commerce platforms and if so, the details thereof;
- (c) the other measures taken by the Government to address the issues of Cyber attacks and technical failures in e-commerce;
- (d) the  number  of  periodical  cyber  security  audits  undertaken  by  e-commerce platforms, payment gateways, payment aggregators and financial institutions;
- (e) whether  the  Government  has  engaged  in  stakeholder  consultations  with respect  to  the  re-introduction  of  Merchant  Discount  Rate  (MDR)  in  UPI transactions and the structure of Payment Service Provider (PSP); and
- (f) if  so,  the  steps  taken  to  improve  customer  awareness  regarding  sharing  of sensitive financial data particularly in Odisha?

## ANSWER

## वाणिज्य एवं उद्योग मंत्रालय में राज्य मंत्री ( श्री सोम प्रकाश ) THE MINISTER OF STATE IN THE MINISTRY OF COMMERCE & INDUSTRY (SHRI SOM PARKASH)

Central Government, in exercise of its powers under section 43A of the IT Act, has prescribed reasonable security practices and procedures and  sensitive  personal  data  or  information  through  the  Information Technology  (Reasonable  Security  Practices  and  Procedures  and

- (a) & (b): Sensitive Personal Data or Information) Rules, 2011.

| (c):   | Sections 43 and Section 66 of the Information Technology Act,2000 provides for legal provisions in respect of penalty and punishment for cyber attacks. Further, Indian Computer Emergency Response Team (CERT-In) has been established as the nodal agency responsible for the collection, analysis, and dissemination of information on cyber incidents and taking emergency measures to contain such incidents.   |
|--------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| (d):   | No centralised data is maintained in this regard.                                                                                                                                                                                                                                                                                                                                                                    |
| (e):   | RBI had placed a Discussion Paper on Charges in Payment Systems for public and stakeholder feedback seeking views and perspectives on different dimensions of charges levied in payment systems including UPl. Comprehensive feedback has been received by RBI from various stakeholders.                                                                                                                            |
| (f):   | A booklet on BE(A)WARE (English and Hindi) and Raju and the Forty Thieves covering the modus operandi of frauds and the way to escape/ avoid getting trapped by fraudsters has been issued by RBI and placed on its Website for use by members of public and the Regulated Entities s(REs) of RBI. These are also distributed in physical programmes conducted by Regional Offices of RBI Ombudsmen.                 |

*******