FDPPI is your Privacy Companion

In pursuance of its objectives to create “Knowledgeable, Skilled, Ethical Data Protection eco system in India”, FDPPI has undertaken in association with Naavi’s Cyber Law College , conduct of a multi level program to develop professionals of the right skill sets.

The program to develop a global level set of professionals who can discharge their responsibilities as “Data Protection Officers” in India has now been set in motion and the first batch of aspirants took the online Certification examination on 23rd February 2020.

These aspirants undertook an online course in December-January conducted by Cyber Law College for creating the first level of awareness of the law as it exists today, namely the Personal Data Protection Bill which is before the Parliament. The students were provided the necessary course material which was also supplemented by the release of the book, “Personal Data Protection Act of India (PDPA 2020)” by Naavi released on 28th January 2020.

This course is considered as Level -I and at least 4 more levels are envisaged from time to time to ensure that these professionals will be trained with whatever is considered essential in terms of legal knowledge, technical knowledge and  behavioural skills.

The legal awareness is being addressed in three modules the first of which was completed now. The second will follow a few months  after the DPA comes into existence. Other three modules are parallel modules one related to International data protection laws, other related to technology and the other related to behavioural skills.

These five modules are offered as independent credit modules that can be completed at different points of time. The current focus is however on module 1.

Interested persons/organizations who would like to associate with FDPPI as training partners for the different modules are welcome to contact the management.

Naavi

The FDPPI presented its comments on the PDPA -Bill both through e-mail and in print through a personal interaction with the Parliamentary Committee.

A link to the copy of the comments would be made available soon.

A supplementary set of comments may be presented if required since the time for submission of the comments has now been extended.

The Personal Data Protection Act 2019 is presently in draft bill form before the Indian Parliament. A joint Parliamentary committee is presently reviewing the draft law and has called for public comments to be submitted by 12th February 2020.

In order to collate the views of FDPPI to be submitted to the committee a discussion was held in Bangalore.

Also Ms Sandhya Khamsera made a presentation on ISO 277001 on the occassion.

Some photographs of the day are given below.

Naavi

The Regional Council of Bangalore was reconstituted in a meeting on 8th February 2020.

The new committee consists of the following members,

1. T P Ashok  (President)
2.  Vasanthika Srinath
3. Deepalakshmi Vadivelan
4. Suresh Balepur
5. P.B. Vishwanath
6. V Nagendra
7. Na.Vijayashankar 

Naavi

FDPPI successfully completed the first course on PDPA which was conducted by Cyber Law College and Naavi, over 12 sessions spread over 6 week ends.  The examination would be conducted in the next two weeks and certificates will be issued from FDPPI.

Cyber Law College was responsible for the training while FDPPI will take care of the certification.

The program which was covered in a total of 18 hours was well received and has been considered as  a certificate titled  “Certified Data Protection Officer” (Level I).

Cyber Law College has already planned further modules of the program which will be rolled out in due course as Level II, Level III, Level IV and Level V.

Level II will be conducted after the regulations come in force. Level III and IV would be covering the Technical and other skill sets that would be required for a DPO. Level V will incorporate a training on other international privacy protection laws.

Following this program plans are being made for offline programs. FDPPI also offers complimentary program for the Directors of any company on the impact of PDPA, which is conceived as a 45 minute interaction. This will be conducted on invitation so that the knowledge of PDPA is spread among the stake holders.

Naavi

Certificate in Personal Data Protection Act (CPDPA) by Cyber Law College

In Association with

Foundation of Data Protection Professionals in India (FDPPI)

 Introduction

This course is meant to introduce the present and upcoming data protection law in India. The course is structured as a 12 session web based course and tentatively covers the following topics.

1. Evolution of Privacy Law in India. (ITA 2000-ITA 2008-Puttaswamy Judgement.etc.)
2. Understanding the Concept of Privacy and its relation with Data Protection
3. Applicability, Exemptions, Transitional Provisions
4. Data Principal’s Rights and Data Protection Obligations
5. Grounds of Processing
6. Transfer of Personal data outside India.
7. DPA and DPO
8. Compliance Obligations
9. Penalties and Offences and Grievance Redressal mechanism
10. Data Protection Challenges under New Technologies
11. Data Governance Framework
12. Interactive discussion

During the course of the discussion provisions of Information Technology Act 2000 (ITA 2000), as well as international data protection laws such as GDPR and CCPA will also be discussed through the focus would be on the Personal Data Protection Act 2018 (Draft law proposed by the Justice Srikrishna Committee).

The Course recognizes that the law is now developing and proposes to provide a free follow up session whenever the final version of the law is passed.

The course will be conducted through online sessions conducted through one of the platforms such as Zoom and connectivity links will be sent to the registered students before the session/s through the registered e-mail.

The First Batch is scheduled to commence from December 7, 2019 with the first session from 11.00 am.

All registered students have been informed over the registered e-mail address about the commencement.

Any person who needs further information may contact Naavi.

Details of Cyber Law College are  available here

Details of FDPPI  are available here

Naavi

It has been announced that the Personal Data Protection Bill will be presented in the Parliament in the next session commencing from 18th November 2019.

While it is the intention of the Government to pass the bill in this session itself, it is certain that detailed discussions will be held both inside the Parliament and in committees.

In order to ensure that these discussions will happen with relevant study of the provisions, FDPPI and Cyber Law College is not only launching its Certificate Course in PDPA in November but also ensure that any changes that may occur in the draft bill is also part of the course.

The Course details of which has already been announced (For updates visit www.cyberlawcollege.com) will commence from December 7th and will be held on week ends between 11.00 am and 12.30 pm for 6 weeks. (Due to unforeseen circumstances, the date of commencement originally meant for November 30 has been postponed by a week. Kindly excuse me for the inconvenience)

All members of FDPPI will get guest invitations from Cyber Law College to attend without the Certification.  Members of FDPPI will also be able to sponsor their friends at concessional fee of Rs 5000/-instead of Rs 7500/-.

FDPPI will also extend this facility to certain partner organizations to a limited extent so that we will create as many number of persons as possible who have studied the Bill and be able to debate it with knowledge.

Naavi

Cyber Law College, which has been conducting Cyber Law related courses since 2000 as well as courses on HIPAA and GDPR, has now started a Web Class based course on Personal Data Protection Act.

This course for “Certificate in PDPA” will consist of 12 live sessions to be conducted by Na.Vijayashankar (Director Cyber Law College) and Chairman FDPPI and cover the following topics.

1. Evolution of Privacy Law in India. (ITA 2000-ITA 2008-Puttaswamy Judgement.Etc.) and
2. Understanding the Concept of Privacy and its relation with Data Protection
3. Applicability, Exemptions, Transitional Provisions
4. Data Principal’s Rights and Data Protection Obligations
5. Grounds of Processing
6. Transfer of Personal data outside India
7. DPA and DPO
8. Compliance Obligations
9. Penalties and Offences and Grievance Redressal mechanism
10. Data Protection Challenges under New Technologies
11. Data Governance Framework
12. Interactive discussion and Review

Each session would be approximately for 90 minutes. It is envisaged that the course will commence in the second half of November 2019 and there would be two classes each week for 6 weeks. Exact schedule of the classes will be announced later.

As an introductory offer, the fees for the course is set at Rs 6000/- only.

A Copy of the prospectus is available here

Existing members of FDPPI can sponsor/refer any participant and such participants would be provided a cashback of Rs 1000/-.

At the end of the course there would be an online test following which the certificates would be issued by FDPPI.

Interested persons may enroll at the earliest by visiting  here

Naavi

Watch the video on the introduction to the program here:

https://www.youtube.com/watch?v=cbwmdwF1YEI&t=123s

Data Governance is getting increased attention now since after the PDPA becoming a law there would be need for further legislation on processing of “Community Data” and “Aggregated Anonymized Data”. This may perhaps be addressed through a new legislation on “Data Governance”. The Government has set up an Expert Committee for this purpose.

More information on these developments are found here:

1. 1. Formation of the Expert Committee
   2. Views of Kris Gopalakrishna…1.. What do they indicate for the Privacy Regulation in India
   3. Views of Kris Gopalakrishna…2.. Leveraging Data for the benefit of individuals
   4. Views of Gopalakrishna …3…on Privacy
   5. Data Productivity vs Data Security
   6. What is Community Privacy? and who has the right of disposal?

There is every indication that “Data Governance Act of India” will sooner or later come into operation. It is good for the Data Protection Professionals to be watchful of these developments.

Data Protection will continue to be an important segment of Data Governance. But it is possible that a new outlook will come to bear on “Data Security” with a lot more liberal outlook than what the data protection professionals would be accustomed to today. The interpretations may move from the GDPR side to the CCPA side, unless the law is clear.

FDPPI will closely watch the developments on Data Governance and as a part of its activities will keep “Data Governance”  on our radar along with “Data Protection”.

In order to initiate the discussions, FDPPI is conducting a webinar on Data Governance on 12th October 2019 at 5.30 pm. Interested persons may contact fdppi.mumbai@fdppi.in for an invitation.

Naavi

Bangalore Chapter of FDPPI organized a Knowledge Sharing session on the theme “Cyber Forensics in the Privacy Era” at Deloitte office on 17th September 2019 between 5.00 pm and 7.30 pm.

Mr Sebastin Edussery, Head Security, IFS, Deloitte, India addressed the gathering  and discussed interesting case studies on Cyber Forensics and the Privacy issues that a Forensic investigator needs to contend with.

This  was then followed by a session on “Evidentiary Challenges in Cyber Forensics” by Naavi, the Chairman of FDPPI.

The sessions were well appreciated by the participants.

Naavi