Description

Issued CERT-In Information Security Practices Directive including data localisation requirement

On 28 April 2022, the Indian Computer Emergency Response Team (CERT-In) issued a directive introducing cybersecurity obligations. The directive includes obligations regarding the notification and mitigation of data breaches, data storage and user id…

Scope

Policy Area
Data governance
Policy Instrument
Data localisation requirement
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2022-04-28
adopted

On 28 April 2022, the Indian Computer Emergency Response Team (CERT-In) issued a directive introduc…

2022-06-27
in grace period

On 27 June 2022, the directive by the Indian Computer Emergency Response Team (CERT-In) "relating t…

2022-06-27
adopted

On 27 June 2022, the Ministry of Electronics and Information Technology announced that the implemen…

2022-09-25
in force

On 25 September 2022, the Indian Computer Emergency Response Team (CERT-In) "relating to informatio…