Explains the core obligations placed on Data Fiduciaries by the DPDP Act and translates these into concrete responsibilities and behaviours expected from individual employees in their day-to-day work.
After completing this subject, learners will be able to describe the main obligations of Data Fiduciaries under the DPDP Act, including accountability for processors, purpose limitation, data minimisation, accuracy, security safeguards, retention and deletion, and grievance redressal. They will be able to connect each high-level obligation to specific, practical behaviours, such as collecting only necessary data, keeping records up to date, following security protocols, respecting retention schedules and channelling grievances appropriately.