Indian Privacy law & Infosec for Startups

Indian Privacy law for Startups

1. Indian Privacy Law & InfoSec for
Startups
Amol Naik

2. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Digital Personal Data Protection (DPDP) Act 2023

3. https://www.linkedin.com/in/amolnaik4/ @amolnaik4

4. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Data Privacy Implementation
Internal
●Data Discovery
●Data Classification
●Data Security
●Infosec Policies
●Processes to fulfil Data Rights requestsExternal/Public
●Privacy Policy
●Concent
●Contact details for Data Rights
request

5. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Data Discovery

6. https://www.linkedin.com/in/amolnaik4/ @amolnaik4

7. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
When penalties are applicable?
●In case of
○Data Breach
○failure to complete Data Rights requests

8. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Data Breach via Insecure Cloud Storage

9. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Data Breach via Insecure Database

10. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Data Breach via Credential Compromise

11. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Data Breach via Application/API Vulnerability

12. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Data Breach via Secrets in Code

13. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Take Away
●Reduce Internet facing servers
●Protect employee accounts with 2FA & SSO
●Remove secrets from code
●Focus on Cloud Security
●Test applications & APIs for security issues
●Restrict access to PII data internally

14. https://www.linkedin.com/in/amolnaik4/ @amolnaik4

15. https://www.linkedin.com/in/amolnaik4/ @amolnaik4
Thank You !!
Amol Naik
https://www.linkedin.com/in/amolnaik4/
@amolnaik4