GDPR turns Eight this May!!
Day One, 25 May 2018, 4 Complaints were filed within hours!!!
Eight years later, GDPR fines have crossed €7.1 billion!!!
Now look at India
- 1.4 billion people.
- 900 million internet users.
- The largest digital footprint any privacy regulator has ever been asked to supervise.
- UPI clears more transactions in a month than Visa does globally in a quarter. Aadhaar sits behind nearly every adult.
- Health records, school records, salary records, location records, all moving through systems built before privacy was a board conversation.
DPDPA is law.
The Indian inbox is about to open from 13th May,2027 i.e., Finally one year story on run.
Three questions for the CXO reading this.
Q1- Where, exactly, a Data Principal request would land in your company any morning from 13th May,2027?
Q2- Who personally will sign the Section 8 file the day the Board’s notice arrives under Section 28 of DPDPA?
Q3- When was privacy last a separate board agenda item, and not a footnote inside cybersecurity?
If you flinched on any of the three, the gap is not technical.
It is governance.
This article is an academic initiative brought to you by the Data Privacy Pro team of AMLEGALS. Subscribe – Stay updated, Stay compliant.