Section 10: Additional obligations of Significant Data Fiduciary

Section 10 applies to 'Significant Data Fiduciaries', a special class of high-risk data handlers designated by the Central Government. Factors for designation include: • Volume and sensitivity of personal data processed • Risk to rights of Data Principals • Impact on India's sovereignty and integrity • Risk to electoral democracy • Security of the State • Public order concerns Additional obligations for Significant Data Fiduciaries: 1. Appoint a Data Protection Officer (must be based in India). 2. Appoint an independent data auditor to evaluate compliance. 3. Conduct periodic Data Protection Impact Assessments (DPIA). 4. Undertake periodic compliance audits. 5. Follow any other measures prescribed by the government.