Author Archives: Vijayashankar Na

About Vijayashankar Na

Naavi is a veteran Cyber Law specialist in India and is presently working from Bangalore as an Information Assurance Consultant. Pioneered concepts such as ITA 2008 compliance, Naavi is also the founder of Cyber Law College, a virtual Cyber Law Education institution. He now has been focusing on the projects such as Secure Digital India and Cyber Insurance

DPDPA-Rules: Publishing the Business Contact Information of DPO

It is amusing to observe that while draftng the rules of DPDPA, MeitY has gone over board to use the feminine gender in the law which was considered a unique aspect of the drafting of the law. In the law, … Continue reading

Posted in Cyber Law | Leave a comment

DPDPA Rules-Data Breach Notification

Data Breach Notification is an important aspect of compliance of any data protection law. DPDPA 2023 also requires a notification both to the DPBI and the Data Principal in the event of a data breach. The DPDPA 2023 act had … Continue reading

Posted in Cyber Law | Leave a comment

DPDPA Rules: How will legacy data consent be handled?

According to DPDPA 2023, consent is to be obtained even for applicable personal data collected by a Data Fiduciary before the commencement of the Act as per the notification. Hence identifying such data and issuing notices to such data principals … Continue reading

Posted in Cyber Law | Leave a comment

Will a Copy of draft Notice be part of the rules?

In one of the versions of the draft DPDPA rules which is under circulation, it is expected that the Government may provide a template for notice for consent. Accordingly a model notice as follows is expected to be part of … Continue reading

Posted in Cyber Law | 1 Comment

Consent Manager and Account Aggregator

When the rules under DPDPA is released, apart from the definition of Significant Data Fiduciary, industry would be keenly looking at the rules related to “Consent manager”. This is one area where Naavi may have divergent views with one section … Continue reading

Posted in Cyber Law | Leave a comment

Who is or Who Should be a Significant Data Fiduciary?

One of the keenly awaited rule under DPDPA 2023 is the criteria to be adopted by the Government for declaring a Data Fiduciary as a Significant Data Fiduciary. While the Act does not define “Sensitive Personal Data”, Section 10(1) brings … Continue reading

Posted in Cyber Law | Leave a comment