<p>Data Fiduciaries bear significant responsibilities under the DPDP Act. Understanding these obligations is crucial for compliance.</p>
<h3>Key Obligations</h3>
<h4>1. Lawful Processing</h4>
<p>Process personal data only for lawful purposes with valid consent or legitimate grounds.</p>
<h4>2. Purpose Limitation</h4>
<p>Use data only for the purposes communicated at the time of collection.</p>
<h4>3. Data Minimization</h4>
<p>Collect only data that is necessary for the specified purpose.</p>
<h4>4. Accuracy</h4>
<p>Maintain accurate and up-to-date records, especially when sharing with other parties.</p>
<h4>5. Storage Limitation</h4>
<p>Retain data only as long as necessary for the purpose, then securely delete it.</p>
<h4>6. Security Safeguards</h4>
<p>Implement appropriate technical and organizational measures to protect data.</p>
<h4>7. Breach Notification</h4>
<p>Report data breaches to the Data Protection Board and affected individuals.</p>
<h4>8. Grievance Redressal</h4>
<p>Establish mechanisms for individuals to raise and resolve concerns.</p>
Related Topics: