Rights of Data Principals
Individuals have the rights to access, correct, erase, and receive their personal data in a structured, machine-readable format from data fiduciaries.
With personal data mapped in your Data Privacy Vault, extracting, updating, or deleting information can be done with a single API call.
Duties of Data Fiduciaries
Ensure data protection policies and processes are in place and implement appropriate security measures.
Protect sensitive data using polymorphic encryption and support governance controls. Continuously monitor data access and enforce access controls without impeding operations.
Cross-Border Data Transfers
Personal data can be transferred outside India based on assessments of data protection levels in the recipient country.
Keep all data within India by isolating it in your Data Privacy Vault that is deployed in India.
Rule 3: Notice to Data Principal
PII is often scattered across systems, making it difficult to provide and manage itemized consent.
By isolating PII in a secure vault, Skyflow stores consent metadata alongside sensitive data, making itemized consent seamless to manage and withdraw.
Rule 6: Reasonable Security Safeguards
PII dispersed across multiple platforms prevents consistent encryption, tokenization, masking.
Disparate systems complicate breach detection and create security gaps.
Have visibility on all activities on PII data
Inspired by Aadhaar’s centralized approach, Skyflow securely isolates PII and applies uniform encryption, tokenization, and masking.
Fine-grained access policies restrict PII access at the row, column, and field levels.
Comprehensive audit trails and real-time monitoring provide visibility to detect and respond to breaches swiftly.
Rule 7: Breach Notification
Identifying affected PII in distributed systems is time-consuming.
Meeting the 72-hour breach notification window requires real-time visibility and coordination.
Skyflow centralizes PII, enabling rapid breach investigation, detection, and reporting. With built-in monitoring, alerting, and detailed logs, Skyflow ensures compliance with breach notification timelines.
Rule 13: Data Principal Rights
Locating and acting on scattered PII makes fulfilling access or erasure requests difficult.
Skyflow consolidates PII in a single vault, simplifying rights requests such as access, erasure, or data nomination, ensuring compliance with ease.
