HomeAdvantageCitadelServicesLive IntelInsightsAboutBook a Briefing
Home / Insights / Insight
Insight11 Jul 20251 min read

#DPDP – What’s the rush? – Take it easy; but do it right – #DhananjayRokde

Did the Government of India & the Standing Committee on #DPDP Bill announce an #OSCAR for the fastest implementation ???

My experience tells me to hang on just a little longer till things are finalised at the top. LET THE FAT LADY SING! Don’t fall for the scare tactics of heavy fines, imprisonment and debarrment!

There is no harm in designing policies and controls around privacy. You should even educate and align with third parties for YOUR privacy expectations.

I am all game getting the groundwork done & dusted. Get your committees in place – Agree on agendas and privacy-risk thresholds. Perform your #DPIA (Data Privacy Impact Assessments)

But …

1. Do NOT make any significant investments, YET! and start screaming that you are compliant

2. Do NOT enter into any legal agreements with privacy bindings

3. Don’t waste time and money on getting yourself audited by some #Big4‘s & the likes of Deloitte, known for using scare-tactics and twisting the truth in Boardrooms (They seem to have cracked the #DPDP code already – with their crystal balls) – Any certification/statement of validation from them has NO VALUE


4. We do NOT know the right way (Parliamentary approved) to protect #PII yet – Maybe the definition of PII / #SPII is likely to change. More attributes may be added to PII & SPII

Here is something to help you get started with your #Privacy Framework, and conducting the #DPIA (Data Privacy Impact Assessment) https://lnkd.in/dW3kQD8q

Originally published on dhananjayrokde.wordpress.com · reproduced in full.

Engage iManEdge

More from the journal.

Read the latest field notes, or bring this intelligence in-house.

Book a Briefing

Securing Bharat, in your inbox.

Field-grade threat analysis, DPDP updates and Citadel releases — from a practising CISO. No noise.