Author Archives: Vijayashankar Na
DPDPA-Rules: Publishing the Business Contact Information of DPO
It is amusing to observe that while draftng the rules of DPDPA, MeitY has gone over board to use the feminine gender in the law which was considered a unique aspect of the drafting of the law. In the law, … Continue reading
DPDPA Rules-Data Breach Notification
Data Breach Notification is an important aspect of compliance of any data protection law. DPDPA 2023 also requires a notification both to the DPBI and the Data Principal in the event of a data breach. The DPDPA 2023 act had … Continue reading
DPDPA Rules: How will legacy data consent be handled?
According to DPDPA 2023, consent is to be obtained even for applicable personal data collected by a Data Fiduciary before the commencement of the Act as per the notification. Hence identifying such data and issuing notices to such data principals … Continue reading
Will a Copy of draft Notice be part of the rules?
In one of the versions of the draft DPDPA rules which is under circulation, it is expected that the Government may provide a template for notice for consent. Accordingly a model notice as follows is expected to be part of … Continue reading
Consent Manager and Account Aggregator
When the rules under DPDPA is released, apart from the definition of Significant Data Fiduciary, industry would be keenly looking at the rules related to “Consent manager”. This is one area where Naavi may have divergent views with one section … Continue reading
Who is or Who Should be a Significant Data Fiduciary?
One of the keenly awaited rule under DPDPA 2023 is the criteria to be adopted by the Government for declaring a Data Fiduciary as a Significant Data Fiduciary. While the Act does not define “Sensitive Personal Data”, Section 10(1) brings … Continue reading