When collecting personal data, which item does Bharat Medicals not have to disclose to the consumer?
India’s Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 require notice of intended recipients and the collecting/retaining agency, while the privacy policy must address reasonable security practices and procedures. The Rules require that an information provider be allowed to review and correct information on request, but do not require a collection-time notice describing options to access that information.
Community Discussion