Category Archives: Cyber Law

Universities hit by Data Protection Fines

Two Universities in South Korea have been fined for Personal Data Breaches with penalties amounting to $459000 (Jeobunk National university) and $253 million (Ewha University) following personal data breach . On July 28, 2024, the personal information of over 320,000 … Continue reading

Posted in Cyber Law | Leave a comment

HR Managers are Shadow DPOs

Organizations in India are debating on what are the credentials of a DPO who is emerging as one of the senior most executives in an organization reporting directly to the Board. Many companies would like to have a trusted person … Continue reading

Posted in Cyber Law | Leave a comment

The hue and cry about RTI Act being diluted by DPDPA is misplaced.

India has been trying to get the “Privacy Protection Act” since around 2006 when the Personal Data Protection Bill 2006 (See here) was first presented in the Parliament along with the Information Technology Amendment Bill 2008 which later became a … Continue reading

Posted in Cyber Law | Leave a comment

How Sound is DPDPA on Fundamentals

DPDPA 2023 has come into existence as a law on August 11, 2023. In January 2025 MeitY issued a notification of draft Rules and opened it for public comments. However till today the rules have not been notified raising the … Continue reading

Posted in Cyber Law | Leave a comment

“Role Based Data Access Management” needs to be redefined for DPDPA Compliance

“Role based Data Access Management” (RBDAM) is a common principle in Data Access Management. In a properly structured RBDAM, access permissions to data is configured based on the functional role of an individual rather than an administrative designation such as … Continue reading

Posted in Cyber Law | Leave a comment

Digital India Corporation to assist MeitY in setting up of the Digital office of DPB

In an interesting development Meity appears to be taking further steps to implement DPDPA 2023 at the earliest. In this direction, the Government has sought an opinion from the AG regarding the conflict with RTI Act. NeGD has also taken … Continue reading

Posted in Cyber Law | Leave a comment