According to India's latest draft privacy law, if your photos are on social media, anyone can scrape and use them for AI and profiling, because they're public: there's "Deemed consent" for publicly available personal data". Also, they don't need to tell you they're doing this. You'll never know if someone is scraping your data, as per the current draft Digital Data Protection Bill 2022. What if your information was made public without your consent? Being informed via a notice allows you to withdraw consent and ask for the data to be erased. But even if you find out and withdraw consent, can't the entity (government, private company or political party) deem consent again? Seems like an infinite loop of privacy violation. A Data Protection Bill should ensure protection of your personal data, public or private, and empower you.
