Opinion Edition_World Cyber Security Forum

Data breaches are an unfortunate reality in today's digital landscape. When a breach involves the personal data of EU residents, the EU's General Data Protection Regulation (GDPR) comes into play. This means strict reporting timelines, potential fines, and reputational harm. Let's break down how to respond effectively to a personal data breach within the GDPR framework. Key Roles and Responsibilities Security Incident Team: Reports the suspected breach immediately to the Data Protection Officer (DPO). Data Protection Officer (DPO): Assesses the risk to individuals' rights and freedoms. Notifies the Data Protection Authority (DPA) and, if necessary, the affected individuals. Collaborates with the organization's public relations team for communication. Processor's DPO: Notifies the controller of the breach as per the terms of their contract. Action Plan for Data Breach Response Inform the DPO: Immediate notification is crucial upon discovery of a bre...

Digital Personal Data Protection Bill, 2023   “ Privacy is not an option, and it shouldn't be the price we expect for just getting on the internet ” ~ Gary Kovacs.   The Digital Personal Data Protection Act (DPDP), 2023, has marked a significant turning point in India’s quickly changing digital environment. The landmark judgment [1] of K.S Puttswamy vs Union of India paved the way for the legislation on data privacy. The Act has inverted the asymmetry that existed with the IT Act of 2000 and empowers the citizens/customers of modern-day India against big social media platforms, corporate houses, and other entities that collect consumer information. It gives them the right to choose the information they would want to provide to these entities, which did not exist with the IT Act of 2000, thus addressing the issue of data privacy a step further and holding these entities accountable in case of Breach of any of the guidelines mentioned in the Act.   Some salient features ...