New Compliance Framework DGPSI Released

FDPPI which is in the forefront of Privacy and Data Protection Compliance related activities in India released a framework for Compliance and Certifiable Audit titled “Data Governance and Protection Standard of India (DGPSI) in Bangalore at Hotel Chancery.

The Following press release was issued on the occasion.

PDF version of the press release available here

The Framework DGPSI is a unique framework which is a combination of DPDPA 2023 compliance requirements, ITA 2000/8 compliance requirements as well as the Draft BIS standard on Data Governance and Management.

FDPPI has developed the standard to replace all other frameworks presently being adopted for compliance to DPDPA 2023. This framework-DGPSI would be available for the industry for developing a Business System of DGPMS which can be also certified by accredited auditors of FDPPI.

This unified framework is open for one unified audit and certification instead of three separate audit and certification for DPDPA Compliance, ITA 2008 compliance and BIS-DGDMS compliance.

FDPPI will be conducting separate training programs for training professionals under this framework and the first of such program will commence by the end of OCtober 2023.

With this FDPPI is ushering in a new era in Data Protection Compliance audits in India.

Enquiries from organizations interested in getting certified as “FDPPI Accredited DGPMS auditors” may be sent to the undersigned.


Posted in Cyber Law | Leave a comment

Privacy Pitamaha Award for Justice Sri K.S.Puttawamy (retd)

Justice Sri Koratagere S Puttaswamy (retd) the petitioner on the Supreme Court case which led to the Privacy Judgement of the Justice Kehar bench on 24th August 2017 and the passing of the DPDPA 2023 was honoured in a historic event at Bengaluru on 24th September 2023 with a title “Privacy Pitamaha”, by FDPPI and Manipal Law School.

The 98 year old Sri Puttaswamy was honoured in a simple ceremony at his residence while in a Press Conference at Hotel Chancery, Lavelle Road, a detailed discussion was held and the following press release was issued.

PDF Version of the above press release available here

The following Citation was presented during the event.


Posted in Cyber Law | Leave a comment

“Jago” campaign on this Digital Society Day

October 17 each year we remember to celebrate as the “Digital Society Day” recognizing that on this day in 2000 India moved from a “No Legal Recognition” for digital documents to “Legal Recognition of electronic documents” and “Digital Signature” paving the way for valid Digital Contracts and giving birth to the legally recognized Digital Society.

On October 17, 2023, Naavi with FDPPI is planning to have a virtual roundtable and take on a campaign “Jago”.

It is customary for “Jago” campaign to be directed at citizens as if it is only the citizens who need to be awakened from slumber whether it is for prevention of Cyber Crimes or implementation of Data Protection.

This year, we would like to extend this “Jago” campaign to the inactive regulators also. Watch out for the detailed agenda.


Posted in Cyber Law | Leave a comment

“End Now” Cyber Crime appeasement by negligence

Yesterday, Mr Anil Rachamalla, Founder of addressed the members of on Social Media Crimes and shard the details of the yeoman service he has been rendering to the community.

I invite visitors to to check out and participate in the activities of the organization.

The presentation made by Mr Anil Rachamalla is available here:

Additionally, I would like the visitors to a research report from the Future Crime Research Foundation about the nature of Cyber Crimes presently affecting our country.

In these discussions we speak of the emergence of Cyber Crime hubs in the country.

We also know that there is the “Deep Web” which is nothing but a Cyber Crime adda.

While all of us have spent years in creating awareness about Cyber Crimes, it surprises me that there is no seriousness with the Government in tackling Cyber Crimes.

MeiTy has made the laws way back in 2000 through ITA 2000 and fortified it with amendments in 2008. This law has a clause called “Cyber Terrorism” under Section 66F.

Unfortunately the activities of the entire villages developing into Cyber Crime hubs has not been recognized by the Ministry of Home Affairs as an activity of terror against the Country.

I have been from time to time bringing similar incidents to CERT In and MeitY and even in cases of attacks on Government Property, MeitY is not willing to even file an FIR if not under Section 66F, under Section 66.

I consider this as a serious dereliction of duty on the part of the officials of MeitY. Keeping quiet when cyber crimes are being committed is a passive assistance to the crime.

In the historic Umashankar Vs ICICI Bank case, the TDSAT declared that “Not placing adequate security measures” is a passive assistance to the commission of a crime under Section 43(g) of ITA 2000 read with Section 66.

I allege that CERT In and MeitY on several occasions are guilty of such forbearance. It is time for NGOs like Anil Rachamalla to question this attitude of Meity which is nothing different from the attitude of the Courts on Urban Naxalites and Teesta Setalvad type of law breakers. Our honourable Chief Justice allegedly takes time to come out of a dance concert to set up a late evening bench one after another to hear the bail petition of Ms Teesta Setalvad during Court holidays and ensures that she gets immediate bail and then forgets the case for month. The same supreme court reserved the judgement in the case of late J Jayalalitha and allow the judgement to lapse after her death. Similar things we can expect in many current cases where influential accused are standing trial at Supreme Court. This is an indication to the public that justice in India is selective. The people of Jamtara et al are the new breed of such privileged criminals.

The same attitude percolates with sections of the Government which donot take action when required in the face of the raising Cyber Crimes and await a disaster to happen before running around.

I have recently sent some emails to the Secretary MeitY, DG-CERT In with copies to Mr Rajeev Chandrashekar and awaiting response for one such cases. I am not sure of their response because Government thinks that people who fight to change the system are fools and they donot know how to flow with the tide. Instead of complaining against organized Crimes, if Naavi or Anil Rachamalla compromises on principles , we can be more prosperous than fighting against Crime and against Criminals who retaliate in different forms.

If researchers can identify towns which are epicenters of crimes, we need to simply take an army of CRPF to cleanse the towns of these Cyber Criminals. We need to close down all bank branches in these towns since these Banks are facilitators of crime, close down all SIM card sellers since MSPs are also facilitators of crime. We need to ensure that these epi centers should be converted into deserts of information at least until the responsible elders of the town try to discipline the society.

Does Mr Amit Shah has the guts to take on these Cyber Criminals? Does MeitY has the intention of acting against such crimes?

If not, the selfless services of persons like Endnowfoundation or Future Crime Research Foundation or will go waste. When I look back and see that I spent 14 years pursuing the Umashankar Vs ICICI Bank case, I feel that the justice delivery system in the Country requires a major overhaul.

I am aware that there are heros in Police such as Dr Triveni Singh who have been tirelessly working on mitigating Cyber Crime incidents. But we need at least one Dr Triveni Singh for every district in the country and an army of Triveni Singhs for the epicenters mentioned above.

I invite all interested persons to join Naavi,org this October 17, the Digital Society Day 2023 which we try to remember each year because ITA 2000 became a law in this day in 2000 and undertake a pledge to find solutions to Cyber Crimes. The days of creating awareness is over. The time is to fight back with criminals.

I liked Anil Rachamalla’s call “Be an Upstander…not a Bystander” . I echo these words against MHA, MeitY and CERT IN also.

Please write back to me through email if you want to participate in the activities of on October 17, 2023.


Posted in Cyber Law | 2 Comments

Advent of Data Protection Education into IIM

The next frontier for Naavi and FDPPI

Yesterday, (12th September 2023), Naavi brought Privacy and Data Protection to the Management Education in India starting a Credit Course with IIM U

Just as KLE Law College, Bangalore became the first Law college to adopt Cyberlaw into law curriculum, PESIT, Bangalore became the first Engineering college to start a Cyberlaw course, NALSAR became the first law institute to start Data protection course, IIM Udaipur became the first IIM to start a course on Data protection which includes not only DPDPA 2023 but also the essence of ITA 2000, ISO 27701 and Data Governance standard of BIS.

While I am proud to be associated with all these institutions in the pioneering efforts, leaders in each of these institutions need to be congratulated on the initiatives they have taken displaying qualities of leadership themselves.

Look forward now to work with Manipal Law School to break new barriers.


Posted in Cyber Law | Leave a comment

FedEx courier Fraud

In recent times several frauds involving extortion of money by threatening a person that a parcel containing contraband items in his name has been seized by police and action is imminent on the individual. They then offer to help and in the process extort money through various means as explained in the above video.

I urge the Police to take action against the intermediaries namely the Banks and the SIM card issuers as facilitators of this kind of a crime.

Bangalore police seem to have disabled more than 15000 SIM cards in such complaints which is very commendable.

This action needs to be done across the country and Banks in villages like Jamtara who make this a profession must be closed if necessary.


Posted in Cyber Law | Leave a comment