The thing with Data is that it is stored on servers (Fun fact, I know!). A law of a country can be applied only if the thing its addressing is within its borders. Because of the fun free-flowing nature of the internet, data goes places before it comes to us and a lot of servers are not inside the country. The committee recommended that this law must apply to any entities which are processing data of Indian citizens and will have to comply with it to operate in India, even if they aren’t based in India. Quite tricky this, because it’s yet to be seen how our Government would be able to make giant companies like Facebook or Amazon compliant with this and how they will deal with them in case they break the law. Block them in toto, perhaps. Or penalise them heavily! Fun times ahead.