Digital Personal Data Protection Act, 2023: Impact on telcos

In the fifth episode of our ‘Gateway to data privacy and protection' podcast series, we explore the extensive implications of the Digital Personal Data Privacy Protection (DPDP) Act, 2023 on telecom companies, with Mini Gupta, Cybersecurity Consulting Partner at EY India. In this podcast, Mini shares insights on several critical topics, including data fiduciaries within the telco ecosystem, cross-border data transfers, the handling and potential misuse of personal data, penalties for data fiduciaries, and the necessary institutional framework for monitoring and addressing data breaches.

In conversation with:

Mansi Gupta

Mini Gupta
EY India Cybersecurity Consulting Partner

Key takeaways

According to the DPDP Act, if telecom service providers and OTT partners have tied up to provide services, both are data fiduciaries as they seek personal data to provide services.
The DPDP Act outlines a multi-tiered escalation process for resolving data breaches, thereby safeguarding the interests of data principals.
In cases where multiple data principals use IoT services in a household, the service subscriber's consent will suffice.
In case the roamer is traveling from India to overseas, personal data transfer may not be required. However, when a foreign individual is visiting India and becomes a roamer here, the GSMA Act would apply.

In the digital age, safeguarding data is a shared responsibility, with multiple data fiduciaries ensuring privacy and accountability.

EY India Cybersecurity Consulting Partner

For your convenience, a full text transcript of this podcast is available on the link below: Read the transcript

If you would like to listen to our podcasts on the go:

Amazon music for Podcasters Spotify SoundCloud YouTube Music

Podcast

Duration 14m 51s

How EY can help

Data protection and privacy

EY data protection and privacy services help organizations stay up-to-date with leading services in data security and data privacy, as well as complying with regulation in a constantly evolving threat environment and regulatory landscape.

Read more

Identity and access management

EY Identity and access management (IAM) services help EY clients to manage the lifecycle of digital identities for people, systems, services and users by giving organizations a clear view of who has access to what resource in the company.

Read more

Cybersecurity

For technology, media and entertainment, and telecommunications (TMT) companies, defending against cyberattacks has never been more vital.

Read more

In this series

(Event List - Manual)

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

EY | Assurance | Consulting | Strategy and Transactions | Tax

About EY

EY is a global leader in assurance, consulting, strategy and transactions, and tax services. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. For more information about our organization, please visit ey.com.

© EYGM Limited. All Rights Reserved.

EYG/OC/FEA no.

ED MMYY

This material has been prepared for general informational purposes only and is not intended to be relied upon as accounting, tax, or other professional advice. Please refer to your advisors for specific advice.