Monthly Archives: July 2025

Two Universities in South Korea have been fined for Personal Data Breaches with penalties amounting to $459000 (Jeobunk National university) and $253 million (Ewha University) following personal data breach . On July 28, 2024, the personal information of over 320,000 … Continue reading →

Organizations in India are debating on what are the credentials of a DPO who is emerging as one of the senior most executives in an organization reporting directly to the Board. Many companies would like to have a trusted person … Continue reading →

India has been trying to get the “Privacy Protection Act” since around 2006 when the Personal Data Protection Bill 2006 (See here) was first presented in the Parliament along with the Information Technology Amendment Bill 2008 which later became a … Continue reading →

DPDPA 2023 has come into existence as a law on August 11, 2023. In January 2025 MeitY issued a notification of draft Rules and opened it for public comments. However till today the rules have not been notified raising the … Continue reading →

“Role based Data Access Management” (RBDAM) is a common principle in Data Access Management. In a properly structured RBDAM, access permissions to data is configured based on the functional role of an individual rather than an administrative designation such as … Continue reading →

In an interesting development Meity appears to be taking further steps to implement DPDPA 2023 at the earliest. In this direction, the Government has sought an opinion from the AG regarding the conflict with RTI Act. NeGD has also taken … Continue reading →