DPDP Compliance

1. COMMITMENT TO DIGITAL DATA PROTECTION

2. CONSENT & NOTICE

• Informed Consent: No personal data is collected or processed without free, specific, informed, unconditional, and unambiguous consent.
• Notice: Prior to collection, users are presented with clear notices detailing the personal data to be collected and the exact purpose of processing.
• Withdrawal: Users have the right to withdraw consent at any time, with the same ease with which it was given.

3. DATA PRINCIPAL RIGHTS

Under the DPDP Act, you (the Data Principal) possess the following rights:

• Right to Access: Request a summary of your personal data processed by us and the underlying processing activities.
• Right to Correction: Request correction of inaccurate or misleading data.
• Right to Erasure: Request the deletion of your personal data when it is no longer required for the purpose it was collected.
• Right to Grievance Redressal: The right to readily available means of registering grievances regarding our data handling.

4. SECURITY & SAFEGUARDS

To prevent personal data breach, we have implemented:

• End-to-End Encryption for privileged matter files.
• Strict Role-Based Access Controls (RBAC) preventing unauthorized internal or external access.
• Regular security audits and vulnerability assessments.
• Automated retention schedules leading to secure data purging upon expiry of necessity.

5. DATA PROTECTION OFFICER & GRIEVANCE OFFICER

In compliance with the DPDP Act, NYAAYSAARTHI has appointed a designated Grievance Officer to address any concerns regarding data privacy and rights.

6. BREACH NOTIFICATION

In the unlikely event of a personal data breach, NYAAYSAARTHI is legally obligated to immediately notify the Data Protection Board of India and all affected Data Principals in the prescribed manner and form.