Data Protection Impact Assessment

As prescribed by the Central Government, only the significant data fiduciaries are obligated to conduct a Data Protection Impact Assessment (DPIA). As per the provisions of the Act, a DPIA shall be a process comprising a description of the rights of Data Principals and the purpose of processing of their personal data, assessment and management of the risk to the rights of the Data Principals, and such other matters regarding such process as may be prescribed.