IT Act & SPDI Rules: Data Protection Regime of India
1. Introduction to SPDI Rules
The Information Technology Act, 2000 (hereinafter, “The IT Act”) as amended by the Information Technology (Amendment) Act, 2008 provides certain provisions relating to personal and sensitive data privacy and protection in India.
Although some provisions under the IT Act aims at regulating the processing of personal data in cyberspace, the primary focus of the IT Act has been on providing information security regulations for the protection of personal and sensitive data in cyberspace.