Explanation:

The Statement of Objects and Reasons of the Personal Data Protection Bill, 2019 states that the Bill is based on the recommendations of “Committee of Experts on Data Protection” chaired by Justice B.N. Srikrishna to examine the issues relating to data protection and the suggestions received from various stakeholders.

• It lays down obligations on entities collecting personal data (data fiduciary) to collect only that data which is required for a specific purpose and with the express consent of the individual (data principal).
• It governs the processing of personal data by government, companies incorporated in India, and foreign companies dealing with personal data of individuals in India. Personal data is data which pertains to characteristics, traits or attributes of identity, which can be used to identify an individual.
• It aims establish an Authority to be called the “Data Protection Authority of India” to protect the interests of data principals, prevent any misuse of personal data, ensure compliance with the provisions. Hence both statements are correct.