Shocking News about how personal information provided to a Mobile Service Provider ended up with a Raddiwala (Scrap Dealer)
http://www.mid-day.com/news/2011/nov/281111-Your-personal-details-end-up-with-raddiwalas.htm
This despite the fact that the corporate involved claims to have a PRIVACY POLICY.
This is yet another glaring case about how policies are incapacitated by weak procedures and controls and a poor execution strategy.
Having Policy is one thing and having an apparatus to implement, enforce and comply with it is another…
I wonder if the corporates in India are aware about the recent Data Privacy Legislation passed in India.
DATA PRIVACY LAW in INDIA
“The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, or “Privacy Rules,” were issued in April to implement India’s 2008 IT Security Act amendment.”
However to my understanding the Law itself is not very clear on how it will be enforced… in the sense who is the Controlling Authority…where can users whose personal information has been compromised seek redress…..
Its a long run …But at least we have made a start…
