In order to formulate a company policy regarding the safety of data for a BPO company that operates data processing, we need to address the sensitivity of the collected data and the necessity to protect it effectively. Assistance is required in creating a policy that ensures the security and confidentiality of the data.
From India, Madgaon
From India, Madgaon
Which state of India do you belong to? I ask for this information because it is important to check whether the Industrial Standing Orders Acts of your state cover IT/BPO companies. The Government of Karnataka has exempted IT/BPO companies from this act. What about your state?
If the Industrial Standing Orders are applicable to the IT/BPO sector of your state, then I recommend formulating standing orders. Include an additional paragraph on data security, rules for data protection, etc. Instead of a separate policy, if you include security provisions in the standing orders themselves, it will be easier for you to take action for misconduct arising out of a breach of security. Since the standing orders are approved by the labor commissioner, obviously, they carry more weight than some policy.
Thanks,
Dinesh Divekar
From India, Bangalore
If the Industrial Standing Orders are applicable to the IT/BPO sector of your state, then I recommend formulating standing orders. Include an additional paragraph on data security, rules for data protection, etc. Instead of a separate policy, if you include security provisions in the standing orders themselves, it will be easier for you to take action for misconduct arising out of a breach of security. Since the standing orders are approved by the labor commissioner, obviously, they carry more weight than some policy.
Thanks,
Dinesh Divekar
From India, Bangalore
Employer's Prerogative in Data Protection
It is the prerogative of the employer to frame rules to regulate and govern the smooth functioning of the establishment, which inevitably includes the protection and secrecy of data generated, created, and maintained in the business interests of the organization.
Drafting a Comprehensive Data Safety Policy
Please draft a comprehensive policy defining with sufficient precision what shall constitute the safety of data and, inter alia, what shall be deemed as data pilferage or theft. Also, prescribe punishment for misuse, theft, misappropriation, or unauthorized usage in any form without prior written permission of the employer, and uniformly enforce compliance.
The employer or head of the institution is the person who has the ultimate control over the affairs of the establishment or undertaking.
Is your establishment registered under the provisions of the Shops & Establishment Act and the rules applicable to the State of Goa?
Kritarth Team is ready to render any service in this regard.
Regards, Team Kritarth
Bengaluru Service Centre
[Email Removed For Privacy Reasons] [Email Removed For Privacy Reasons]
9.9.16
From India, Delhi
It is the prerogative of the employer to frame rules to regulate and govern the smooth functioning of the establishment, which inevitably includes the protection and secrecy of data generated, created, and maintained in the business interests of the organization.
Drafting a Comprehensive Data Safety Policy
Please draft a comprehensive policy defining with sufficient precision what shall constitute the safety of data and, inter alia, what shall be deemed as data pilferage or theft. Also, prescribe punishment for misuse, theft, misappropriation, or unauthorized usage in any form without prior written permission of the employer, and uniformly enforce compliance.
The employer or head of the institution is the person who has the ultimate control over the affairs of the establishment or undertaking.
Is your establishment registered under the provisions of the Shops & Establishment Act and the rules applicable to the State of Goa?
Kritarth Team is ready to render any service in this regard.
Regards, Team Kritarth
Bengaluru Service Centre
[Email Removed For Privacy Reasons] [Email Removed For Privacy Reasons]
9.9.16
From India, Delhi
CiteHR is an AI-augmented HR knowledge and collaboration platform, enabling HR professionals to solve real-world challenges, validate decisions, and stay ahead through collective intelligence and machine-enhanced guidance. Join Our Platform.