DCPLA Exam Dumps : DSCI Certified Privacy Lead Assessor

Under the DSCI Privacy Framework and consistent with global definitions (including GDPR and APEC), a “Data Controller” is the entity that determines the purposes and means of processing personal data. For its own employees, an organization inherently controls how their personal data is collected, used, and stored — making it the data controller by default. This is not necessarily the case for clients or supervisory authorities, whose data processing may be governed by different contractual or legal terms.

==============

Section 15 of the Digital Personal Data Protection Act, 2023 outlines the duties of Data Principals. For breaches of these duties, the Act prescribes a financial penalty not exceeding ten thousand rupees. This provision ensures that Data Principals are accountable for misusing or violating data protection norms while balancing their responsibilities under the Act.

==============

The DSCI Assessment Framework for Privacy (DAF-P©) emphasizes the need for organizations to move beyond checkbox compliance to embrace “Demonstrable Accountability.”

This involves:

Being able to show evidence of privacy program implementation

Having appropriate governance structures

Showing that privacy principles are embedded into processes

This proactive and transparent approach to privacy governance aligns with leading global frameworks.