India recently issued new data privacy rules that impose considerable restrictions on how businesses handle personal information. The Information Technology Rules, 2011 (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information), or “Privacy Rules” were issued in April.
The Privacy Rules, which implement an existing law (India’s Information Technology Act, 2008 and its recent amendment in 2008) can significantly affect businesses including multinational companies with back offices in India, IT and outsourcing companies in India and overseas companies that contract IT and outsourcing services with Indian companies.
As per the Privacy Rules, organizations must:
Notify individuals when their personal information is collected via letter, fax, or email,
Make a privacy policy available,
Take steps to secure personal information,
Offer a dispute resolution process related to the collection and use of personal information, etc.
Any personal data collected within India or moved into and outside India from another country comes under the preview of the Privacy Rules.
via New data privacy rules for IT/BPO companies come into effect in India.
![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=0bae87dd-79bd-4afa-a50f-c458e61c2499)
