Back to Module
2 of 14|Obligations of Data Fiduciary
reading 15 min•Security Safeguards
Authentication
Ensuring only authorized people can access the data.
🎯 Learning Objectives
- ▸ Understand the importance of strong authentication
- ▸ Implement multi-factor authentication (MFA)
Beyond Passwords
Most data breaches happen because an employee's password was stolen or guessed. A Data Fiduciary must implement strong authentication mechanisms.
- • Multi-Factor Authentication (MFA): Require at least two forms of verification (e.g., password + OTP).
- • Single Sign-On (SSO): Centralized secure login.
- • Role-Based Access Control (RBAC): Employees should only have access to the data necessary for their job.
📖 Glossary
- MFA
- Multi-Factor Authentication, a security system that requires more than one method of authentication.
- RBAC
- Role-Based Access Control, a method of restricting network access based on the roles of individual users.
🔑 Key Takeaways
- Passwords are not enough. Use MFA.
- Implement role-based access control (RBAC).
- Regularly audit user access.
📚 Further Reading
- DPDPA Section 8(5) — Government of India (2023)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...