FDPPI is inviting software developers in the domain of Privacy and Data Protection to join the community of “Special Associate Members”. Such members can expect an opportunity to show case their products in FDPPI forum from time to time and also seek mentorship for better compliance of DPDPA.
As an example of what FDPPI wants the product developers to achieve, let us discuss the “Discovery and Classification” systems presently on offer in the market.
DPDPA is applicable for legacy data and hence every organization needs to ensure that all their existing data to which DPDPA is applicable is identified and tagged. This is not merely a “Personal Data Discovery Process”. It is a process which identifies DPD or Data which is protected by DPDPA.
DPDPA does not protect “Non Personal Data”. Hence the discovery system should exclude such data. Even after thus filtering the “Personal and Non personal Data”, some categories of personal data may not be considered DPD. One example is personal data generated outside India and not used for providing any product or service to data principals in India needs to be excluded. If personal data is generated outside India, not related to business or service provided to data principals but is processed in India, it may be protected or not protected based on certain conditions.
Like wise there are many conditional application of DPDPA that needs to be taken into account before we tag a set of data elements as DPD.
Do the current software have such capability? If not, how to achieve such capability?
These are some of the questions which the software developers need to ask themselves. If they feel that they need expert guidance in this regard, it is time for them to consider “Special Associate Membership” of FDPPI. Contact today.
(Look out for more such reasons… to follow)
Naavi.
