A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.
Which of the following are not mandatory pre-requisite before transferring sensitive personal data to its Asian branches?
Indian constitution does not expressly provide for the “right to privacy†to its citizens. However, there were various judicial pronouncements of the apex court which finally established the “right to privacy†as a fundamental right subsumed under Article 21 of the constitution of India. Article 21 inter alia provides and protects the __________________.
A public domain or freely accessible piece of information cannot be construed as sensitive personal data or information under Indian law.
Specifically, what section of the IT (Amendment) Act, 2008 lays down the provisions for punishment for the offense of wrongful disclosure of personal information with the intention of causing loss or gain to another?
Regarding projects such as Aadhaar, the National Population Register (NPR), etc. that involve national government projects specific to India, which of the following statements is accurate?
A multinational company with operations in several parts within EU and outside EU, involves international data transfer of both its employees and customers. In some of its EU branches, which are relatively larger in size, the organization has a works council. Most of the data transferred is personal, and some of the data that the organization collects is sensitive in nature, the processing of some of which is also outsourced to its branches in Asian countries.
For exporting EU branch employees’ data to Asian Countries for processing, which of the following instruments could be used for legal data transfer?