December 22, 2024

FDPPI releases a Unified Framework for Compliance of DPDPA 2023

Foundation of Data Protection Professionals in India (FDPPI), a primer organization on Data Privacy in India responded to the Government of India passing the much-awaited Digital Personal Data Protection Act (DPDPA 2023) with the release of an industry-friendly indigenous compliance framework titled “Data Governance and Protection Standard of India” (DGPSI).

FDPPI recognizes that compliance of DPDPA 2023 is essential for thousands of organizations in India in both business and non-business category including educational institutions, industry and professional associations, etc., and noncompliance could result in heavy monetary penalties. At the same time remaining in compliance would be a concern on many SMEs and MSMEs both for the efforts required and the cost involved.

Presently the industries in such cases depend on frameworks which are expensive to implement and are adapted from foreign sources. Such frameworks are less than optimum and are also expensive.

To alleviate the problem of compliance, FDPPI has brought out a new framework titled DGPSI which is a single unified framework that combines the requirements of DPDPA 2023 and also addresses the requirements of related compliance of Information Technology Act 2000 (ITA 2000) and the Bureau of Indian Standard’s draft standard on Data Governance.

This unique combination will simplify the compliance, increase the standard of compliance in the country, and bring down the cost of compliance substantially. FDPPI has already trained many professionals to conduct both implementations of the standard as well as Certify them under the FDPPI scheme of certification.  This effort will continue in the future.

This DGPSI framework will be an alternative to the current international audit standards such as ISO 27701 and has the potential to make India the leader of the Certification of Data Privacy practice across the world.

The framework authored by Naavi, a pioneer and thought leader in the field of Cyber Jurisprudence and Privacy Jurisprudence has been fine-tuned by a team of FDPPI experts and will continue to be improved as the requirements evolve.