How Can We Create a Strong Data Safety Policy for Our BPO Company?

In order to formulate a company policy regarding the safety of data for a BPO company that operates data processing, we need to address the sensitivity of the collected data and the necessity to protect it effectively. Assistance is required in creating a policy that ensures the security and confidentiality of the data.

Which state of India do you belong to? I ask for this information because it is important to check whether the Industrial Standing Orders Acts of your state cover IT/BPO companies. The Government of Karnataka has exempted IT/BPO companies from this act. What about your state?

If the Industrial Standing Orders are applicable to the IT/BPO sector of your state, then I recommend formulating standing orders. Include an additional paragraph on data security, rules for data protection, etc. Instead of a separate policy, if you include security provisions in the standing orders themselves, it will be easier for you to take action for misconduct arising out of a breach of security. Since the standing orders are approved by the labor commissioner, obviously, they carry more weight than some policy.

Thanks,

Dinesh Divekar

Employer's Prerogative in Data Protection

It is the prerogative of the employer to frame rules to regulate and govern the smooth functioning of the establishment, which inevitably includes the protection and secrecy of data generated, created, and maintained in the business interests of the organization.

Drafting a Comprehensive Data Safety Policy

Please draft a comprehensive policy defining with sufficient precision what shall constitute the safety of data and, inter alia, what shall be deemed as data pilferage or theft. Also, prescribe punishment for misuse, theft, misappropriation, or unauthorized usage in any form without prior written permission of the employer, and uniformly enforce compliance.

The employer or head of the institution is the person who has the ultimate control over the affairs of the establishment or undertaking.

Is your establishment registered under the provisions of the Shops & Establishment Act and the rules applicable to the State of Goa?

Kritarth Team is ready to render any service in this regard.

Regards, Team Kritarth
Bengaluru Service Centre
[Email Removed For Privacy Reasons] [Email Removed For Privacy Reasons]
9.9.16

Thank you for your reply, Mr. Dinesh Divekar. I am from Goa, and our company is a startup in Goa. We do have a code of conduct signed by each and every employee during their first day of work. As they are working on data processing, they deal with.