Data Privacy & Protection

We help ensure data privacy and protection in our client’s policies, processes and engagements. We are experts in the field of personal data and advise clients on the extant data protection rules i.e. SPDI rules, 2011, the Personal Data Protection Bill, 2019 and GDPR compliance.
Our scope of advice includes the following:
Data Privacy Policy, Consents and Notices: We draft comprehensive Data Privacy Policies keeping in mind the scope of processing being conducted along with data retention requirements. We advise on the consent and notice requirements for processing of personal/ sensitive personal data. We create consent processes for collection of personal data from employees/ job applicants.
Data Protection in Contracts and External engagements: We conduct firm-wide review of contracts and third party/ vendor engagements to ensure data protection. We also advise on the controls that third parties need to have in place whilst collecting personal/ sensitive personal data.
Data Privacy Training material: Corrida Legal provides curated training material on Data Privacy and Protection for Employees and Management/Team leads.
Please reach out to us on contact@corridalegal.com for more information on our training materials.
Legal Data Privacy Audit: We conduct firm-wide check on the resting and processing of personal/ sensitive personal data in order to ensure adherence with the applicable personal data laws. We advise on changes/ improvements to the data collection/storage process to ensure due compliance.
GDPR Compliance: We advise clients on ensuring compliance with GDPR aspects if they are processing data pertaining to GDPR countries. We advise clients on preparation and maintenance of Records of Processing and the Breach Notification Procedure, as mandated under GDPR.
Aadhaar compliance: We advise on Aadhaar collection and processing requirements including consent of Aadhaar user, redaction of Aadhaar and maintenance of Aadhaar Data Vaults.
Personal Data Protection Bill, 2019: We use a two-pronged approach to ensure our Client’s readiness for the upcoming law: (1) Data footprint assessment: Conducting a thorough check on the resting and processing of personal data/sensitive personal data through checklists and department-wise/management briefings. This step helps maintain a clear record of resting of personal data/ sensitive personal data. (2) Privacy policies and governance framework: We prepare the privacy policies, notices and consent drafts required for the processing of personal/ sensitive personal data. We also put in the controls and governance, as required for processing of personal data/ sensitive personal data.

Sexual Harassment in Metaverse: A Legal Analysis

Leave a Comment / Data Privacy & Protection, Employment Law /

In the evolving landscape of technology, the metaverse, a virtual space, is swiftly emerging as a foundation of our digital reality. This captivating virtual space allows users to engage with computer-generated environments and fosters incredible possibilities for socializing, unleashing creativity, and providing a new dimension of entertainment. It marks a transformative shift in how we experience and interact with the digital realm. However, like any space where people gather, the metaverse is not immune to challenges, and a notable concern is the occurrence of sexual harassment within its digital domains.

Sexual Harassment in Metaverse: A Legal Analysis Read More »

Notice under the Digital Personal Data Protection Act, 2023- Key compliances that businesses should ensure!

Leave a Comment / Data Privacy & Protection /

In the era of information and innovation, data has become the currency of the digital realm, and its protection is paramount. India has stepped into this new digital age with a resounding declaration – the Digital Personal Data Protection Act, 2023 (“DPDP Act”). Enacted with precision, this legislation marks a turning point in how businesses and organisations ought to manage personal data.

Notice under the Digital Personal Data Protection Act, 2023- Key compliances that businesses should ensure! Read More »

Unpacking Consent under the Digital Personal Data Protection Act, 2023: Part 1

Leave a Comment / Data Privacy & Protection /

In the age of digital transformation, the protection of personal data has become paramount. Recognizing this, governments worldwide are enacting comprehensive data protection laws to safeguard individual privacy and control over personal information. India’s response to this imperative is the Digital Personal Data Protection Act, 2023 (DPDPA). A cornerstone of the DPDPA is its consent-related provisions, which lay the foundation for how organizations collect, process, and manage personal data. Part 1 of this article series will delve into these provisions, offering a comprehensive understanding of the requirements and implications associated with consent under the DPDPA.

Unpacking Consent under the Digital Personal Data Protection Act, 2023: Part 1 Read More »

Best law firm in Gurgaon

How to be compliant with Data Protection & Privacy Laws in India

Leave a Comment / Data Privacy & Protection, Legal and Regulatory Landscape /

India is on the brink of witnessing a major change in the realm of privacy, marked by the enactment of the new Digital Personal Data Protection Act, 2023 (“DPDPA”). DPDPAis a by-product of the landmark Puttaswamy Judgement which made the right to privacy a Fundamental Right for all Indian citizens[1]. It is expected that the DPDPA will enhance the data protection compliance regime in the country and will empower users to agitate this Fundamental Right better once enacted. In our analysis, we have meticulously outlined the pivotal compliance measures that must be diligently observed by all relevant stakeholders in accordance with the DPDPA. This article aims to provide a clear and structured overview of the key obligations and responsibilities imposed by the DPDPA, facilitating a deeper understanding and effective implementation of these crucial compliance standards.

How to be compliant with Data Protection & Privacy Laws in India Read More »

Best law firm in Gurgaon

EU Imposes Fine on Meta, Indian Businesses on Alert: Part 2

Leave a Comment / Data Privacy & Protection, Legal and Regulatory Landscape /

Part 1 of this series discussed the EDPB’s findings on Meta’s illegal data transfers to the US and its decision to impose a 1.2 Billion Euro fine on Meta. In Part 2, the article attempts to highlight the impact of this decision on Indian businesses with active platforms in the EA/EU region. While doing so, it articulates Meta’s response to the EDPB, India’s existing international data transfer and retention policy, the data protection framework between India and the EU, and the way forward.

EU Imposes Fine on Meta, Indian Businesses on Alert: Part 2 Read More »

Best law firm in Gurgaon

EU Imposes Fine on Meta, Indian Businesses on Alert: Part 1

Leave a Comment / Data Privacy & Protection /

The European Union (EU) has issued a 1.2 billion euro fine on Meta Inc. for transferring the personal data of EU subjects to the United States (US). The present article series is divided into two parts. Part 1 of the series explains the European Data Protection Board’s (EDPB) decision in the light of the events that transpired and Part 2 of the series attempts to highlight the impact of this decision on Indian businesses operational in Europe.

EU Imposes Fine on Meta, Indian Businesses on Alert: Part 1 Read More »

DATA PROTECTION IMPACT ASSESSMENT – A NEED FOR MODERN-DAY BUSINESSES IN INDIA

Leave a Comment / Data Privacy & Protection, Legal and Regulatory Landscape /

In an increasingly data-driven world, businesses in India are faced with the responsibility of managing and protecting vast amounts of sensitive information. As data breaches and privacy concerns become more prevalent, it is imperative for organisations to prioritise the implementation of robust data protection measures. One such essential tool is the Data Processing Impact Assessment

DATA PROTECTION IMPACT ASSESSMENT – A NEED FOR MODERN-DAY BUSINESSES IN INDIA Read More »

Best-law-firm-in-gurgaon

Mobikwik Data Leak

Leave a Comment / Data Privacy & Protection, Legal and Regulatory Landscape, Uncategorized /

Gurugram based Fintech company Mobikwik’s data has allegedly been leaked in the dark web and was being sold at 1.5 Bitcoins i.e. approximately INR 63 lakhs.. The disclosure about the data leak was made by cybersecurity analyst Rajashekhar Rajaharia. Various independent security researchers also have claimed that personal data of the users was taken from

Mobikwik Data Leak Read More »

corridalegal_bestlawfirmingurgaondelhincr

BUDGET 2021-2022: DETAILED ANALYIS

Leave a Comment / Capital Markets, Corporate Law, Data Privacy & Protection, Dispute Resolution - Litigation, Employment Law, Insolvency & Debt Recovery, Legal and Regulatory Landscape, Real Estate Litigation, Uncategorized /

Whilst delivering the first budget in the new decade and that too in a digital format, the country’s financial minister started the budget with Rabindra Nath Tagore’s quote: ‘Faith is the bird that feels the light and sings when the dawn is still dark.’ Notably, the budget has faced contractions only three times in the past and this

BUDGET 2021-2022: DETAILED ANALYIS Read More »

Scroll to Top