Eversheds Sutherland (US) LLP

As new data privacy regulations spring up around the globe with greater frequency, multinational companies face difficulties not only with complying with a patchwork of requirements, but also with the uncertainty of what these requirements will actually mean and how they will be applied. Sometimes, as is the case in India, it will be courts who eventually fill in the gaps—but even court decisions

Effective with their publication on April 11, 2011,1 the Central Government of India (GOI) adopted the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (Rules), under Section 43A of The Information Technology Act, 2000, as amended by The Information Technology (Amendment) Act, 2008 (IT Act). The Rules define certain key,...