Did you know?
The Digital Personal Data Protection Act and Rules require certain organisation to conduct Data Protection Impact Assessment (DPIA)
What is DPIA?
A process comprising a description of the rights of individuals and the purpose of processing of their personal data, assessment and management of the risk to the rights of the individual, and such other matters regarding such process as may be prescribed.
Applicability
Significant Data Fiduciary (SDF) meansany organisation or class of organisation as may be notified by the Central Government has the obligation to conduct a periodic DPIA.
Purpose
To ensure effective observance of the provisions of the Act and the Rules.
Frequency
Once in every period of twelve months from the date on which the Data Fiduciary is:
- Notified as an SDF, or
- Included in a notified class of Data Fiduciaries.
Report to Data Protection Board of India
SDF shall cause the person carrying out the DPIA to furnish to the Board a report containing significant observations in the DPIA.
*Refer our alert on key stakeholder for definition of SDF
