Comments on DPDPA Rules-5: Business Contact Address

We have already discussed the status of Business Contact Address under DPDPA 2023 earlier and categorically held the view that

a) We cannot determine the nature of an email as personal or business with reference to the domain name attached to the email address. Accordingly Vijay@ujvala.com can be a personal email while Vijay@gmail.com can be a business email depending on the choice of “Vijay”.

b) We need to collect the choice of the data principal himself while collecting the email as to whether it is personal or business email.

c)By default and in the absence of information to the contrary, name@companyname.com can be considered a business contact address while name@gmail.com can be considered as a personal address while Designation@companyname.com can be considered as non-personal data.

The recognition of “Business Contact Data” being different from personal data is seen from DPDPA 2023 requiring the publication of business contact address of the Compliance official/DPO under Section 8 of DPDPA 2023 and Rule 9 of the DPDPA Rules.

Naavi

Reference articles:

Business Contact address and DPDPA 2023

Is Business Contact Data, Personal Data under GDPR?

About Vijayashankar Na

Naavi is a veteran Cyber Law specialist in India and is presently working from Bangalore as an Information Assurance Consultant. Pioneered concepts such as ITA 2008 compliance, Naavi is also the founder of Cyber Law College, a virtual Cyber Law Education institution. He now has been focusing on the projects such as Secure Digital India and Cyber Insurance
This entry was posted in Cyber Law. Bookmark the permalink.