Back to Module
4 of 14|Obligations of Data Fiduciary
reading 15 min•Security Safeguards
Monitoring
Actively watching for suspicious activity.
🎯 Learning Objectives
- ▸ Understand the need for continuous monitoring
- ▸ Implement SIEM and threat detection
Proactive Defense
Continuous monitoring means using software to watch your network and databases 24/7. If an employee suddenly downloads 10,000 customer records at 2 AM, the system should flag it.
The DPDPA does not prescribe specific tools, but "reasonable safeguards" implies active monitoring of critical systems.
📖 Glossary
- SIEM
- Security Information and Event Management, software that aggregates and analyzes activity from many different resources across your IT infrastructure.
🔑 Key Takeaways
- Passive security (like firewalls) is not enough.
- Use automated tools to detect anomalies.
- Set up alerts for unusual data access patterns.
📚 Further Reading
- DPDPA Section 8(5) — Government of India (2023)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...