Monthly Archives: January 2024
Why Not … DGPSI
After DPDPA 2023 has become a reality, there is a scramble to find a framework of compliance which can assist organizations in implementing a Data Governance and Protection Management System (DGPMS) which can provide “Compliance by Default and Design”. The … Continue reading
Why Not “Significant Data Fiduciary” be Process Centric
(Continuation of the previous article) One of the key aspects of DPDPA 2023 is the recognition of some Data Fiduciaries as “Significant Data Fiduciaries” (SDF). The SDF would have responsibilities to appoint a DPO, a Data Auditor and conduct DPIA … Continue reading
Why Not?..a series of questions on Rules to DPDPA?
(Continued from Previous Article) The MeitY is now trying to finalize the rules under DPDPA 2023. From the indications now available, the ministry is trying to release a complete set of 25/26 rules rolled into one notification. In the last … Continue reading
The “Data Privacy-Risk” in Account Aggregators
(Continued from previous article) One of the major issues of AAs (Account Aggregators) is the need to ensure the strict following of the “Fit and Proper” criteria to ensure that the valuable personal data that may come into the hands … Continue reading
Meity regulations under DPDPA may clash with RBI regulations
(This is a continuation of the previous article) RBI has been a powerful sectoral regulator and has assumed leadership for regulating the entire financial sector including the FinTech companies. In the process, some of its regulations clash with the implementation … Continue reading