← Back home
What triggers the designation
- Volume and sensitivity of personal data processed
- Risk to the rights of Data Principals
- Potential impact on India's sovereignty and integrity
- Risk to electoral democracy
- Security of the State
- Public order
Additional obligations
Data Protection Officer — an appropriately appointed officer based in India.
Independent Data Auditor — to evaluate ongoing compliance.
Data Protection Impact Assessments — periodic assessments of processing, risk, and impact on Data Principal rights.
Periodic audits — regular compliance reviews and other prescribed measures.
Whether your organisation could be notified as a Significant Data Fiduciary depends on government notification, not self-assessment. This page is informational only.