RULE 9 – Publishing of contact information of person who is able to answer questions about processing
u/s 8(9)
| No | Description |
| (1) | A Data Fiduciary shall= |
| (a)publish on her website or app or both as the case may be, and | |
| (b)intimate the data principal through in-app notification and every piece of correspondence with her, | |
| the business contact information of a person who is able to answer on behalf of the Data Fiduciary, the questions, if any, raised by the Data Principal about the processing of her personal data | |
| 2 | If the Data Fiduciary is a Significant Data Fiduciary, the business contact information published under sub-rule (1) shall be that of its Data Protection Officer |
| 3 | The business contact information to be published under sub-rule (1) shall be published in like manner as provided in sub-rule (2) of rule 5. |
Compliance Checklist — Rule 9 (Contact Information)
- Business contact information of responsible person is clearly published
- Contact details are available on website, app, or both
- Contact information is included in all relevant communications with Data Principals
- Designated person is capable of addressing queries about data processing
- For Significant Data Fiduciaries, Data Protection Officer details are provided
- Contact information is accurate, up-to-date, and easily accessible
- Process exists to respond to data-related queries in a timely manner