What extra obligations apply to a Significant Data Fiduciary (SDF)?
Answer:
Significant Data Fiduciaries - notified by the Government based on volume and sensitivity of data, risk to data principals and to sovereignty, security and public order - must appoint a Data Protection Officer based in India, conduct an annual Data Protection Impact Assessment and independent audit, undertake due diligence to verify that algorithmic software does not pose risks to data principals, and observe any restrictions on transferring specified personal data outside India.
significant data fiduciary sdf dpo audit dpia algorithm obligations
Related Questions:
- By when do organizations need to technically integrate with Board-registered Consent Managers?
- Is the consent notice required to give contact details?
- What makes consent valid under Section 6 of the DPDP Act?
- Must a Data Fiduciary maintain data accuracy?
- What is the right to correction and erasure?
- How are DPDP penalties determined by the Board?