- Law
- India
- In progress
IT Act: Ready
Self-assessed by IdeaScore. Not certified by an outside body.
India's rules on reasonable security practices for sensitive personal data.
In place
- The security measures listed under Security Practices on this page.
- Passwords are stored only as hashes.
- A draft Privacy Policy and a named Grievance Officer.
Work in progress
- A written information security programme: the policy set described in the ISO/IEC 27001 entry.
- Yearly access reviews and security test reports.
- A statement, in the Privacy Policy, of which rules apply to which data.
Evidence
- Privacy PolicyPublished
- Security pagePublished
- Policy setBeing prepared
Limits
- The SPDI Rules partly overlap with the DPDP Act.
Bring Your Questions to a Product Specialist
A 30-minute walkthrough of the Trust Centre, the Data and Privacy card and the Decision Trail, with your committee's questions.