Introduction
Not all data fiduciaries are created equal. The DPDP Act imposes enhanced obligations on certain entities designated as "Significant Data Fiduciaries" (SDFs).
What Makes an Organisation an SDF?
- Volume of personal data processed
- Type of personal data processed
- Risk of harm to data principals
- Geographic reach
- Sectoral sensitivity
Conclusion
SDFs must invest in robust compliance frameworks to meet enhanced obligations. This includes dedicated resources, expert guidance, and ongoing monitoring.