DPDP Act 2023 · Obligations

Section 8: General obligations of Data Fiduciary

What Section 8 says, in plain English

The core operational obligations: accountability (8.1), accuracy (8.3), security safeguards (8.4-8.5), breach notification (8.6), erasure on purpose exhaustion (8.7), grievance officer publication (8.9-8.10), and ensuring processors comply (8.5).

What it means for you

Section 8 is the whole compliance programme in one section. Publishing a grievance officer under 8(9) is not optional even for small Data Fiduciaries.

How this is operationalised in dcomply

Section 8 spans several modules: Breach Notification for 8(6), Data Retention for 8(7), and grievance-officer publication is part of the standard tenant setup for 8(9)-8(10).

Other sections in Obligations

Section 4: Grounds for processing Section 5: Notice Section 6: Consent Section 7: Certain legitimate uses Section 9: Children's data Section 10: Additional obligations for Significant Data Fiduciaries

Also useful

All 44 sections DPDP vs GDPR Scan your site Ask a DPO (free)

← Section 7: Certain legitimate uses All sections Section 9: Children's data →