All insights
GuideGovernance

Preparing for Significant Data Fiduciary duties

Section 10 readiness for organisations that may be notified as Significant Data Fiduciaries.

Data>Nuance

Section 10 provides for additional obligations where a Data Fiduciary is notified as significant. Businesses with large-scale or sensitive processing should understand operational implications before designation becomes urgent.

Preparedness areas

  • responsibility and reporting arrangements for a Data Protection Officer;
  • independent data auditor readiness;
  • data protection impact assessment practices; and
  • periodic audit evidence and remediation tracking.

Readiness is easier where documentation and decision ownership already exist across product, security and legal teams.

This publication is general information and is not legal advice for a specific organisation or matter.

Continue reading

DPDP Act

DPDP Act readiness for technology businesses

A practical first-pass framework for product, legal and security teams deciding what to document and implement first.

Read insight

Notice and consent

Notice under Section 5 of the DPDP Act

What a Data Fiduciary should review before putting consent and notice experiences into production.

Read insight

Start with context

Book a focused DPDP Act consultation.

Bring an upcoming launch, notice review, data mapping question, incident readiness issue or implementation deadline. We will help identify the right next step.