4

Remediation Roadmap

SL-01

The work that closes the gaps, grouped into workstreams a delivery team can actually own. Moving an item to done advances the clauses it was blocking.

Work items
23
Completed
6
Blocked
2
Past target
3
Effort remaining
174days
Backlog8
REM-2026-0413P1

Grievance platform hosted outside India without an assessed basis

Dr. Kavya Menon30 Oct
REM-2026-0414P1

Verifiable parental consent not obtained for scholarship applicants under 18

Dr. Kavya Menon12 Sept
REM-2026-0416P2

No published means of making a rights request on two department websites

Farhan Ahmed29 Jul
REM-2026-0419P2

Legacy pension tape archive never scanned

Dr. Kavya Menon10 Sept
REM-2026-0420P3

Two directorates below 60% on mandatory security training

Ananya Reddy03 Aug
REM-2026-0424P3

Nomination facility not offered on the citizen portal

Meera Iyer16 Sept
REM-2026-0427P2

Algorithmic due diligence not performed for eligibility scoring

Sunita Khanna19 Sept
REM-2026-0430P2

Grievance response period exceeded in 11% of cases

Vikram Saxena13 Sept
Planned3
REM-2026-0422P3

Call recordings retained beyond the stated period

Arjun Malhotra05 Sept
REM-2026-0423P3

Notice readability above the target grade for three services

Pallavi Desai03 Oct
REM-2026-0431P2

Shadow AI usage detected across 6 unsanctioned services

Vikram Saxena23 Sept
In progress4
REM-2026-0410P1

AI assistant processes personal data with no recorded legal basis

Priya Nair16 Aug
REM-2026-0411P1

Eight processor contracts lack the prescribed security provisions

Vikram Saxena16 Sept
REM-2026-0426P1

DPIA not completed within the last twelve months

Sanjay Chauhan25 Aug
REM-2026-0429P1

Withdrawal not propagated to two downstream systems

Rohit Verma08 Oct
Blocked2
REM-2026-0417P2

Retention periods not enforced in the analytics data lake

Harpreet Kaur05 Sept

Blocked on procurement approval for the encryption licence.

REM-2026-0421P3

Skill development portal connector failing for 11 days

Arjun Malhotra25 Jul

Blocked on procurement approval for the encryption licence.

Review0
Nothing here
Done6
REM-2026-0412P1

Unencrypted personal data columns in three legacy databases

Naveen Kulkarni03 Oct
REM-2026-0415P2

Entitlement certification incomplete for the current quarter

Meera Iyer27 Sept
REM-2026-0418P2

Backup restore not tested for the Health Card Registry

Sanjay Chauhan17 Oct
REM-2026-0425P2

Purpose deviation on 22 elements in the analytics lake

Rohit Verma19 Aug
REM-2026-0428P3

Public form store collects more data than the declared purpose

Priya Nair15 Sept
REM-2026-0432P4

Board contact details not displayed on two service portals

Harpreet Kaur27 Jul

Click a card to advance it to the next column.