#blockchaincompliance

DPDP & Blockchain - Case Study 2 She withdrew consent. The nodes remembered anyway. Meera's hospital recorded her consent withdrawal correctly. However, six network nodes already held copies of her medical data — and none of them received a deletion instruction. Under Sections 6(4) and 8(2) of the DPDP Act, 2023, every node in a blockchain network may be a Data Processor. Each one needs a written contract. Each one must act on consent withdrawal. IS Audit 3.0 (ICAI) specifically identifies distributed data exposure as a blockchain risk. Governance must reach every node — not just the originating server. The compliance deadline is 13 May 2027.

DPDP Meets Emerging Technologies Episode 3: Blockchain and DPDP Compliance Case Study 1 — Arjun's Story Arjun works as a senior analyst at a financial services firm. His employer recently migrated its employee verification system to a permissioned blockchain. His name, PAN, date of birth, address, and employment history were recorded as transactions on this chain. Two years later, Arjun resigned and asked his former employer to erase his personal data. His HR department explained, politely, that the data was "on the blockchain" and therefore could not be deleted. Arjun filed a complaint. His employer had no answer. This article analyses in DPDP Act provisions and how the above situation can be avoided. #DPDPAct #BlockchainCompliance #DataPrivacyIndia #DataProtection #ISAudit

Follow our page to know more DPDP and Block Chain, a new Episode on DPDP and Emerging Technology

https://bizinfopro.com/whitepapers/finance/global-crypto-policy-review-outlook-2024-2025/