Life In Gdpr Era For Indian Organizations

A degree of uncertainty looms amongst Indian companies which are engaged in outsourced data processing activities mainly due to the applicability of GDPR and its implications on their businesses. Companies need to revisit their policies and procedures with respect to data privacy and protection.

- 

The European Union’s General Data Protection Regulation (the “GDPR”) is effective 25 May 2018 and is related to data privacy and protection. It aims to bring all the EU member states under one umbrella by enforcing a single data protection law and is intended to put guidelines and regulations on how data is processed, used, stored or exchanged. It applies to all the organizations that are registered in EU or have an establishment or subsidiary in EU. It also applies to organizations selling goods or services to citizens of the EU.

A degree of uncertainty looms amongst Indian companies which are engaged in outsourced data processing activities. This uncertainty is mainly due to the applicability of GDPR and its implications on their businesses. The penalty scheme mentioned in the GDPR is also a major concern for such companies since GDPR permits enforce ability against a data processor directly. Companies need to revisit their policies and procedures with respect to data privacy and protection.