New Indian Privacy Rules Could Force The Hand Of Many U.S. Retailers
Written by Mark RaschJune 23rd, 2011
New data security regulations in India may make retailers think twice about outsourcing functions that involve consumer information to the subcontinent. The new government rules, which took effect in April, could impact virtually all retailer IT operations if anything is located in India, writes Legal Columnist Mark Rasch.
How strict are these new rules? They require rapid notification of data breaches—but the rules also require getting express written consent from customers for using their data; getting consent if you want to have third-parties handle the data; providing consumers with contact information about every party who has access to their data; and allowing consumers to have their data purged from all your systems.
This Story Is Only Available For Premium Subscribers. Click Or Login In Below To Read The Rest Of This Story.
Already a Subscriber? Login Here
One Comment | Read New Indian Privacy Rules Could Force The Hand Of Many U.S. Retailers
Leave a Reply
Readers, specifically those who want to comment on a story:
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
-Christine
June 26th, 2011 at 6:14 pm
Really nice write up, however, don’t you think keeping in mind the EU Law on data protection, Indian law is meant to facilitate outsourcing business. EU directives on data protection does not allow an EU country to transfer daa to a country that does not follow adequate data protection measures. The new law it seems is bound to encourage clients from EU to outsource their work to India. Moreover, even US is introducing a new data protection law this year in July that too is supposed to enforce stringent data protection measures.