India should ensure the growth of the digital economy while keeping personal data of citizens secure and protected. No one will innovate in a surveillance-oriented environment or in a place where an individual's personal information is compromised. The ultimate control of data must reside with the individuals who generate it; they should be enabled to use, restrict or monetise it as they wish. Therefore, data protection laws should enable the right kind of innovation - one that is user-centric and privacy protecting.
Based on the above passage, the following assumptions have been made:
Which of the above assumptions is/are valid?