Regulatory Watch
SL-02Amendments, Board notifications, MeitY circulars, sectoral guidance and judgments — each assessed for impact against the clauses it touches. Recording that something is not applicable is as much a part of the record as acting on it.
6 publications
Clarifies the acceptable mechanisms for verifying that the person giving consent for a child is an identifiable adult, and requires Data Fiduciaries to report the mechanism in use.
Prescribes the structure of the 72-hour detailed report, including mandatory fields on affected categories and the status of Data Principal notification.
Consultation draft proposing an adjustment to the retention period after which specified Data Fiduciaries must erase personal data where the Data Principal has not approached them.
Sets higher safeguards for diagnosis-level data held by State health schemes, including column-level access restriction.
Holds that the identities of recipients must be disclosed on an access request even where the sharing was under a statutory obligation.
Recommends treating retrieval indexes and embeddings as personal data holdings subject to the same erasure and consent obligations as primary stores.