India Data Protection Overview

Summary

India does not have a Data Protection Authority yet, but the Personal Data Protection Bill aims to establish one. For employee privacy notices, consider the Information Technology Act, 2000, and its 2011 rules, while also preparing for future compliance with the Personal Data Protection Bill.

Full Conversation

Should the employee privacy notice be drafted under DPDP or under The Information Technology Act, * and the Information Technology (Reasonable Security Practices and Procedures And Sensitive Personal Data Or Information) Rules, *
In India, for drafting an employee privacy notice, you should consider both:
- The Information Technology Act, * and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, *, as they are currently applicable.
- The forthcoming Personal Data Protection Bill (DPDP), which will set comprehensive guidelines once enacted.
Consider current regulations and anticipate future compliance under DPDP.