Advocate (Dr.) Prashant Mali's Blog

What is Sensitive Personal Data or Information in India ?  [ DATA PROTECTION LAWS IN INDIA ] Sensitive Personal Data or Information though not directly defined in The Section 2 of The IT Act, 2000. But the definition which has force of law is  defined under  the  section 3  of   THE INFORMATION TECHNOLOGY (REASONABLE SECURITY PRACTICES AND PROCEDURES AND SENSITIVE PERSONAL DATA OR INFORMATION) RULES, 2011 made by Central Government  In exercise of the powers conferred by clause (ob) of sub­section (2) of section 87 read with section 43A of the Information Technology Act, 2000 (21 of 2000). Section 3 reads as  3.    Sensitive personal data or information. —  Sensitive personal data or information of a person means such  personal information  which consists of   information relating to;― (i)  password;      (ii) financial information such as Bank a...