SHORT ANSWER:
Websites in India must comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
DETAILS:
- Websites must have a privacy policy that clearly explains how personal data is collected, used, and protected.
- Users must be informed about the purpose of data collection and their rights regarding their data.
- Consent must be obtained from users before collecting sensitive personal data.
PUNISHMENT / IMPLICATIONS (if applicable):
- Non-compliance can lead to penalties under the Information Technology Act, 2000.
SOURCE:
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
Related Questions: