DPOs and Notification Requirements
Jump to
DPOs and Notification Requirements Start Comparison
Is the concept of data protection officer (DPO) recognized in the jurisdiction?

Last review date: 20 December 2024

Yes

Are there circumstances in which it is mandatory to appoint a DPO or similar position?

Last review date: 20 December 2024

Yes

If yes, under what circumstances?

☒  other

Per the DPDP Act, all data fiduciaries are required to appoint a grievance officer or any contact person to respond to a data principal’s questions about the processing of their data.

Further, per the act, every significant data fiduciary is required to appoint an individual as a data protection officer. The Government of India may notify a data fiduciary or classes of data fiduciaries as significant data fiduciaries based on certain factors like the volume and nature of personal data processed.

Where a DPO is appointed, does the DPO have to meet specific requirements?

Last review date: 20 December 2024

Yes

If yes, what are these requirements?

☒  resident in the jurisdiction

The DPDP Act mandates data protection officers to be based in India.

Are there obligations to notify, submit filings to, register with or obtain approval from local data protection authorities to collect and/or process personal data generally?

Last review date: 20 December 2024

No