Outsourcing to India may not be affected by privacy rules
Personal data sent to India by companies outsourcing work to service providers in the country will not be covered under the country's stringent new rules for the collection of personal data, an executive of a data protection standards company set up by the National Association of Software and Service Companies (Nasscom) said.
The new Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules 2011 require companies or their intermediaries to take consent in writing from individuals about the use of the sensitive personal information they collect.
The Indian government has assured outsourcers that it will be issuing a clarification soon that the rules do not cover personal data collection by companies abroad, said Kamlesh Bajaj, CEO of the Data Security Council of India, a company set up by Nasscom to set standards for data security and privacy for outsourcers.
