Section 8: General obligations of Data Fiduciary

Section 8 is the backbone of Data Fiduciary obligations: 1. Responsibility: The Data Fiduciary remains responsible even when a Data Processor handles the data. 2. Contract Requirement: Data Processors must be engaged only under a valid contract. 3. Data Quality: Data used for decisions or shared with others must be complete, accurate, and consistent. 4. Security Safeguards: Reasonable technical and organizational measures must be implemented. 5. Breach Notification: Both the Board and affected individuals must be informed of personal data breaches. 6. Data Erasure: Data must be deleted when consent is withdrawn or the purpose is fulfilled, unless the law requires retention. 7. Transparency: Contact details of the Data Protection Officer must be published. 8. Grievance Redressal: An effective mechanism must be established to handle complaints from Data Principals.