On 28 April 2022, the Indian Computer Emergency Response Team (CERT-In) has released a direction which prescribes compliance requirements in relation to timely reporting of data breaches and retention of records. This direction is to come into effect within 60 days of its issuance. Some of the key highlights of this direction are:

• Mandatory reporting within 6 hours: Service providers, intermediaries, data centres, body corporates and government organisations (“Covered Entities”) are to mandatorily report specific cyber incidents to the CERT-In within 6 hours of noticing such incidents or being brought to notice about such incidents.
• Localisation of data logs: Covered Entities are required to mandatorily enable logs of their information and communications technology (ICT) systems and store it in India for a rolling period of 180 days.  
• Synchronisation of ICT system clocks: Covered Entities will, mandatorily, be required to synchronise their information and communication technology systems with the network time protocol servers of National Informatics Centre (NIC) or National Physical Laboratory (NPL) or with servers traceable to NIC or NPL servers.  
• Retention of records by virtual assets industry: Virtual asset service providers, virtual asset exchange providers and custodian wallet providers will be required to mandatorily maintain KYC records of users / customers and records of financial transactions for a period of 5 years.
• Retention of customer / subscriber details: Data centres, virtual private server providers, cloud service providers and virtual private network service providers will be required to accurately retain specific information about their customers / subscribers, such as, their validated names, period of hire of services, purpose for hiring services; their validated address and contact numbers, their ownership pattern, etc. This information is required to be maintained for a period of 5 years or longer duration (as mandated by the law) post cancellation / withdrawal of the registration of customers / subscribers.

 We bring to you on Thursday, June 16, a discussion on this 

Speakers: 

• Supratim Chakraborty,  Commercial and Tech / Corporate / Data Practice Groups, Partner, Khaitan & Co
• Manikant R Singh, Chief Information Security officer,  DMI Finance Pvt Ltd

Please share your questions during registrations. There would be no Live questions for this event.

The event is free for all but owing to limited seats, please RSVP early. Link will be shared on morning of the event