DPDP Rules 2025 notified — enforceable 13 May 2027.|Time left: –d –h –m –s
Where the risk concentrates

As a Data Fiduciary and Data Processor

Many processors in the chain

A wide, straightforward-to-map footprint, but with many processors in the chain — background verification (BGV) vendors and payroll processors chief among them.

Manual sharing is the real risk

Group health insurance policies in particular are still often exchanged via spreadsheets or email rather than an integrated system; an integrated mode should be the default, not the exception.

Family info includes children's data

Data spans salary, health and family information — and family information commonly includes children's data via dependents on health and insurance policies.

Algorithmic screening fairness

Algorithmic resume screening and candidate scoring tools need fairness and accuracy review.

Indefinite candidate retention

Candidate data retention after a hiring decision is frequently indefinite and undocumented.

Three-party consent structure

Client (employer) and candidate data flows create a three-party consent and disclosure structure.

Still sharing group health policy data by spreadsheet?

30 minutes to talk through your specific data footprint — no obligation.

Book a Consultation