Monthly Archives: June 2024

DPDPA Rules: Management of Data Principal’s Rights

The draft rules currently under discussion regarding the management of Data Principal’s Rights tries to provide clarity to Sections 11, 12, 13 and 14 of DPDPA 2023. It is noted that the rules does not make any reference to Section … Continue reading

Posted in Cyber Law | Leave a comment

DPDPA Rules: The Significant Data Fiduciary

One of the important aspects of DPDPA Rules that was being looked upto was regarding the identification of the “Significant Data Fiduciary” since many obligations including the need to designate the DPO emerges from the definition. It is surprising that … Continue reading

Posted in Cyber Law | Leave a comment

DPDPA Rules: Which provisions will become effective now

While the DPDPA 2023 was gazetted on 11th August 2023, the notification of the date of its effectiveness has been awaited. Presently the draft rule is ready for public comments and the industry is eagerly waiting to know which provisions … Continue reading

Posted in Cyber Law | Leave a comment

DPDPA-Rules: Publishing the Business Contact Information of DPO

It is amusing to observe that while draftng the rules of DPDPA, MeitY has gone over board to use the feminine gender in the law which was considered a unique aspect of the drafting of the law. In the law, … Continue reading

Posted in Cyber Law | Leave a comment

DPDPA Rules-Data Breach Notification

Data Breach Notification is an important aspect of compliance of any data protection law. DPDPA 2023 also requires a notification both to the DPBI and the Data Principal in the event of a data breach. The DPDPA 2023 act had … Continue reading

Posted in Cyber Law | Leave a comment

DPDPA Rules: How will legacy data consent be handled?

According to DPDPA 2023, consent is to be obtained even for applicable personal data collected by a Data Fiduciary before the commencement of the Act as per the notification. Hence identifying such data and issuing notices to such data principals … Continue reading

Posted in Cyber Law | Leave a comment