Sensitive Personal Information
The sensitive personal information bears a special significance. Although falls under the domain of personal information, but it comes with more responsibilities and safeguard requirements than what is required to protect a personal information of the person. Personal Information can be defined as any information through which a person can be identified, it can be the details around the person's identity such as phone number, email address, IP address, geo-location data etc. However, sensitive personal information can include information such as - 1. Account Password; 2. Financial information such as banking information; 3. Health related information such as medical records, health certificate; 4. Any information relating to the above points. The Information Technology (reasonable Security Practices And Procedures And Sensitive Personal Data Or Information) Rules, 2011 known as the "SPDI rules" or "IT Rules 2011" defines sensitive information and also places a ...