get in touch

< Back to principles

principle 2

Adhere to privacy and security standards

DPI collects large amounts of personal data and sensitive information, including financial, health, and location data. Robust privacy and security measures not only help safeguard individuals' personal data but also build trust in the digital infrastructure. The data collected also becomes an important asset to improve service delivery and innovate in public interest.

Source:

Article 12, Universal Declaration of Human Rights: Recognises the right to privacy and to its protection in case of interference

Article 17, International Covenant on Civil and Political Rights: Also recognises the right to privacy and to its protection in case of interference

Filter By:

all

Law

Policy

Technical Standard

Operational Guideline

Tool

Law

Implement notice and consent mechanisms for the collection, use, and sharing of personal data

P2.T1/L

This entails a combination of technological solutions and policy frameworks. Laws must mandate the communication of clear and understandable details on the specific types of data being collected, the intended uses of the data, the duration of data retention, and the entities with whom the data may be shared. This is supplemented by user-friendly interfaces and interfaces to present privacy notices in a clear and accessible manner.

Rationale

The establishment of these mechanisms in DPI empowers individuals with information on how their data is being collected, processed, and shared within the ecosystem, and enables them to exercise them to maintain control over their personal information.

Practice

India:

ABDM: Clause 11.1 of ABDM’s Health Data Management Policy emphasises on a consent-based approach that aligns with existing legal requirements.

Estonia:

X-Tee: The Personal Data Protection Act 2018 is legislation designed to protect individuals' fundamental rights and freedoms concerning the processing of their personal data, with a special emphasis on the right to privacy.

Stakeholders

PUBLIC SECTOR

PRIVATE SECTOR

DEVELOPMENT ACTORS

CSOs and END USERS

Lifecycle

DEVELOPMENT

DEPLOYMENT

Filter By:

all

Law

Policy

Technical Standard

Operational Guideline

Tool

Law

Implement notice and consent mechanisms for the collection, use, and sharing of personal data

P2.T1/L

Rationale

Practice

India:

ABDM: Clause 11.1 of ABDM’s Health Data Management Policy emphasises on a consent-based approach that aligns with existing legal requirements.

Estonia:

Stakeholders

PUBLIC SECTOR

PRIVATE SECTOR

DEVELOPMENT ACTORS

CSOs and END USERS

Lifecycle

DEVELOPMENT

DEPLOYMENT

Note: This tool is best viewed ON a desktop/laptop

Aapti Institute

37, Aga Abbas Ali Rd, Halasuru

Yellappa Chetty Layout, Sivanchetti Gardens Bengaluru, Karnataka 560042

For inquiries

contact@aapti.in

Cookies Settings

Note: This tool is best viewed ON a desktop/laptop

Aapti Institute

37, Aga Abbas Ali Rd, Halasuru

Yellappa Chetty Layout, Sivanchetti Gardens Bengaluru, Karnataka 560042

For inquiries

contact@aapti.in

Cookies Settings

Note: This tool is best viewed ON a desktop/laptop

Aapti Institute

37, Aga Abbas Ali Rd, Halasuru

Yellappa Chetty Layout, Sivanchetti Gardens Bengaluru, Karnataka 560042

For inquiries

contact@aapti.in

Cookies Settings