DIGIT Core
PlatformDomainsAcademyDesign SystemFeedback
2.8
2.8
  • ☑️Introducing DIGIT Platform
    • DIGIT - Value Proposition
  • Platform
    • 🔎Overview
      • Principles
      • Architecture
        • Service Architecture
        • Infrastructure Architecture
        • Deployment Architecture
      • Technology
        • API Gateway
        • Open Source Tools
      • Checklists
        • API Checklist
        • Security Checklist
          • Security Guidelines Handbook
          • Security Flow - Exemplar
        • Performance Checklist
        • Deployment Checklist
      • UI Frameworks
        • React UI Framework
    • 🔧Core Services
      • Workflow Service
        • Setting Up Workflows
        • Configuring Workflows For An Entity
        • Workflow Auto Escalation
        • Migration To Workflow 2.0
      • Location Services
      • User Services
      • Access Control Services
      • PDF Generation Service
      • MDMS (Master Data Management Service)
        • Setting up Master Data
          • MDMS Overview
          • MDMS Rewritten
          • Configuring Tenants
          • Configuring Master Data
          • Adding New Master
          • State Level Vs City Level Master
      • Payment Gateway Service
      • User Session Management
      • Indexer Service
        • Indexer Configuration
      • URL Shortening Service
      • XState Core Chatbot
        • Xstate-Chatbot Message Localisation
        • XState-Chatbot Integration Document
      • NLP Engine Service
        • NLP Chatbot
      • SMS Template Approval Process
      • Telemetry Service
      • Document Uploader Service
      • Notification Enhancement Based On Different Channel
      • Report Service
        • Configuring New Reports
          • Impact Of Heavy Reports On Platform
          • Types Of Reports Used In Report Service
      • SMS Notification Service
        • Setting Up SMS Gateway
          • Using The Generic GET & POST SMS Gateway Interface
      • Survey Service
      • Persister Service
        • Persister Configuration
      • Encryption Service
        • Encryption Client Library
        • User Data Security Architecture
        • Guidelines for supporting User Privacy in a module
      • FileStore Service
      • ID Generation Service
      • Localization Service
        • Configuring Localization
          • Setup Base Product Localization
          • Configure SMS and Email
      • Email Notification Service
      • Searcher Service
      • Zuul Service
      • User OTP Service
      • OTP Service
      • Chatbot Service
      • National Dashboard Ingest
        • National Dashboard API Performance Testing Specs and Benchmark
        • National Dashboard: Steps for Index Creation
        • National Dashboard Adaptor Service
          • Deployment of Airflow DAG
          • Trigger Airflow DAG
          • Configure Airflow
          • Insert & Delete Data - Steps
          • Important Links & Credentials
          • Code Structure
          • KT Sessions
          • Pre-requisites For Enabling Adaptor
        • Revenue Maximisation
      • Audit Service
        • Signed Audit Performance Testing Results
      • Service Request
      • Self Contained Service Architecture (HLD)
      • Accelerators
        • Inbox Service
    • ✏️API Specifications
      • User
      • Access Control
      • Employee
      • Location
      • Localisation
      • Encryption
      • Indexer
      • File Store
      • Collection
      • DSS Ingest
      • HRMS
      • National Dashboard Ingest
      • WhatsApp Chatbot
      • Master Data Management
      • ID Generation
      • URL Shortner
      • Workflow Service
      • Workflow v2
      • Document Uploader Service
      • OTP Service
      • Reporting Service
      • PDF Generation Service
      • Payment Gateway Service
    • 🔐Data Protection & Privacy
      • Data Protection & Privacy Definitions
      • Legal Obligations For Privacy - eGov
      • Data Protection & Privacy - Global Best Practices
      • Guidelines
        • Platform Owner Guidelines
        • Implementing Agencies Guidelines
        • Admin Guidelines
        • Program Owner Guidelines
        • Data Security and Data Privacy
      • Data Privacy Policy Templates
        • eGov Data Privacy Policy
        • Implementing Agency Privacy Policy
        • Admin & Program Owner Privacy Policy
        • Supporting Agency Privacy Policy
      • Global Standards For All Roles
    • ▶️Get Started
      • Install DIGIT
      • Access DIGIT
      • Sandbox
      • Training and Certification
        • Training Resources
    • ⚒️Integrations
      • Payment
      • Notification
      • Transaction
      • Verification
      • View
      • Calculation
    • 🛣️Roadmap
    • 🎬Open Events
    • 👩‍💻Source Code
    • 👁️Project Plan
    • 📋Discussion Board
    • 🤝Contribute
  • Guides
    • 📓Installation Guide
      • DIGIT Deployment
      • Quick Setup
        • DIGIT Installation on Azure
        • DIGIT Installation on AWS
      • Production Setup
        • AWS
          • 1. Pre-requisites
          • 2. Understanding EKS
          • 3. Setup AWS Account
          • 4. Provisioning Infra Using Terraform
          • 5. Prepare Deployment Config
          • 6. Deploy DIGIT
          • 7. Bootstrap DIGIT
          • 8. Productionize DIGIT
          • FAQ
        • Azure
          • 1. Azure Pre-requisites
          • 2. Understanding AKS
          • 3. Infra-as-code (Terraform)
        • SDC
          • 1. SDC Pre-requisites
          • 2. Infra-as-code (Kubespray)
          • CI/CD Setup On SDC
        • CI/CD Set Up
          • CI/CD Build Job Pipeline Setup
        • Prepare Helm Release Chart
        • Deployment - Key Concepts
          • Security Practices
          • Readiness & Liveness
          • Resource Requests & Limits
          • Deploying DIGIT Services
          • Deployment Architecture
          • Routing Traffic
          • Backbone Deployment
    • 💽Data Setup Guide
      • User Module
      • Localisation Module
      • Location Module
    • 🚥Design Guide
      • Model Requirements
      • Design Services
      • Design User Interface
      • Checklists
    • ⚒️Developer Guide
      • Pre-requisites Training Resources
      • Backend Developer Guide
        • Section 0: Prep
          • Development Pre-requisites
          • Design Inputs
            • High Level Design
            • Low Level Design
          • Development Environment Setup
        • Section 1: Create Project
          • Generate Project Using API Specs
          • Create Database
          • Configure Application Properties
          • Import Core Models
          • Implement Repository Layer
          • Create Validation & Enrichment Layers
          • Implement Service Layer
          • Build The Web Layer
        • Section 2: Integrate Persister & Kafka
          • Add Kafka Configuration
          • Implement Kafka Producer & Consumer
          • Add Persister Configuration
          • Enable Signed Audit
          • Run Application
        • Section 3: Integrate Microservices
          • Integrate IDGen Service
          • Integrate User Service
          • Add MDMS Configuration
          • Integrate MDMS Service
          • Add Workflow Configuration
          • Integrate Workflow Service
          • Integrate URL Shortener Service
        • Section 4: Integrate Billing & Payment
          • Custom Calculator Service
          • Integrate Calculator Service
          • Payment Back Update
        • Section 5: Other Advanced Integrations
          • Add Indexer Configuration
          • Certificate Generation
        • Section 6: Run Final Application
        • Section 7: Build & Deploy Instructions
        • FAQs
      • Flutter UI Developer Guide
        • Introduction to Flutter
          • Flutter - Key Features
          • Flutter Architecture & Approach
          • Flutter Pre-Requisites
        • Setup Development Environment
          • Flutter Installation & Setup Guide
          • Setup Device Emulators/Simulators
          • Run Application
        • Build User Interfaces
          • Create Form Screen
        • Build Deploy & Publish
          • Build & Deploy Flutter Web Application
          • Generate Android APKs & App Bundles
          • Publishing App Bundle To Play Store
        • State Management With Provider & Bloc
          • Provider State Management
          • BloC State Management
        • Best Practices & Tips
        • Troubleshooting
      • UI Developer Guide
        • DIGIT-UI
        • Android Web View & How To Generate APK
        • DIGIT UI Development Pre-requisites
        • UI Configuration (DevOps)
        • Local Development Setup
        • Run Application
        • Create New Screen In DIGIT-UI
          • Create Screen (FormComposer)
          • Inbox/Search Screen
          • Workflow Component
        • Customisation
          • Integrate External Web Application/UI With DIGIT UI
          • Utility - Pre-Process MDMS Configuration
          • CSS Customisation
        • Citizen Module Setup
          • Sample screenshots
          • Project Structure
          • Install Dependency
          • Import Required Components
          • Write Citizen Module Code
          • Citizen Landing Screen
        • Employee Module Setup
          • Write Employee Module Code
        • Build & Deploy
        • Setup Monitoring Tools
        • FAQs
          • Troubleshoot Using Browser Network Tab
          • Debug Android App Using Chrome Browser
    • 🔄Operations Guide
      • DIGIT - Infra Overview
      • Setup Central Instance Infra
      • Central Monitoring Dashboard Setup
      • Kubernetes
        • RBAC Management
        • DB Dump - Playground
      • Setup Jenkins - Docker way
      • GitOps
        • Git Client installation
        • GitHub organization creation
        • Adding new SSH key to it
        • GitHub repo creation
        • GitHub Team creation
        • Enabling Branch protection:
        • CODEOWNER Reviewers
        • Adding Users to the Git
        • Setting up an OAuth with GitHub
        • Fork (Fork the mdms,config repo with a tenant-specific branch)
      • Working with Kubernetes
        • Installation of Kubectl
      • Containerizing application using Docker
        • Creation of Dockerhub account
      • Infra provisioning using Terraform
        • Installation of Terraform
      • Customization of existing tf templates
      • Cert-Manager
        • Obtaining SSL certificates with the help of cluster-issuer
      • Moving Docker Images
      • Pre and post deployment checklist
      • Multi-tenancy Setup
      • Availability
        • Infrastructure
        • Backbone services
          • Database
          • Kafka
          • Kafka Connect
          • Elastic search
            • ElasticSearch Direct Upgrade
            • Elastic Search Rolling Upgrade
        • Core services
        • DIGIT apps
        • DSS dashboard
      • Observability
        • ES-Curator to clear old logs/indices
        • Monitoring
        • Tracing
        • Jaeger Tracing Setup
        • Logging
        • eGov Monitoring & Alerting Setup
        • eGov Logging Setup
      • Performance
        • What to monitor?
          • Infrastructure
          • Backbone services
          • Core services
        • Identifying bottlenecks
        • Solutions
      • Handling errors
      • Security
      • Reliability and disaster recovery
      • Privacy
      • Skillsets/hiring
      • Incident management processes
      • Kafka Troubleshooting Guide
        • How to clean up Kafka logs
        • How to change or reset consumer offset in Kafka?
      • SRE Rituals
      • FAQs
        • I am unable to login to the citizen or employee portal. The UI shows a spinner.
        • My DSS dashboard is not reflecting accurate numbers? What can I do?
      • Deployment using helm
        • Helm installation:
        • Helm chart creation
        • Helm chart customization
      • How to Dump Elasticsearch Indexes
      • Deploy Nginx-Ingress-Controller
      • Deployment Job Pipeline Setup
      • OAuth2-Proxy Setup
      • Jira Ticket Creation
  • Reference
    • 👉Setup Basics
      • Setup Requirements
        • Tech Enablement Training - Essential Skills and Pre-requisites
        • Tech Enablement Training (eDCR) - Essential Skills and Prerequisites
          • Development Control Rules (Digit-DCR)
          • eDCR Approach Guide
        • DIGIT Rollout Program Governance
        • DevOps Skills Requirements
        • Infra Requirements
        • Team Composition for DIGIT Implementation
        • Infra Best Practices
        • Operational Best Practices
        • Why Kubernetes For DIGIT
      • Supported Clouds
        • Google Cloud
        • Azure
        • AWS
        • VSphere
        • SDC
      • Deployment - Key Concepts
        • Security Practices
        • CI/CD
        • Readiness & Liveness
        • Resource Requests & Limits
      • Understanding ERP Stack
        • ERP Monolithic Architecture
        • ERP Hybrid Architecture
        • ERP Coexistence Architecture
        • APMDP-HYBRID-INFRA ARCHITECTURE
        • eGov SmartCity eGovernance Suite
        • ERP Deployment Process
        • ERP Release Process
        • ERP User Guide
      • Deploying DIGIT Services
        • Deployment Architecture
        • Routing Traffic
        • Backbone Deployment
      • Troubleshooting
        • Distributed Tracing
        • Logging
        • Monitoring & Alerts
    • 📥Reference Reads
      • Analytics
      • DevSecOps
      • Low Code No Code
        • Application Specification
      • Beneficiary Eligibility
      • Government and Open Digital Platforms
      • Microservices and Low Code No Code
      • Registries
      • Platform Orientation - Overview
    • 🔏Data Security
      • Signed Data Audit
      • Encryption Techniques
      • Approaches to handle Encrypted Data
    • ❕Privacy
    • 🕹️DevOps
      • 1. How DNS works
      • 2. Load Balancer
      • 3. SSL/Cert-manager
      • 4.Ingress,WAF
      • 5.VPC
      • 6.Subnets
      • 7.EKS
      • 8.Worker Node Group
      • 9.RDS
      • 10.NAT
      • 11.Internet Gateway
      • 12.Block Storage (EBS Volumes)
      • 13.Object Storage (S3)
      • 14. Telemetry
Powered by GitBook

All content on this page by eGov Foundation is licensed under a Creative Commons Attribution 4.0 International License.

On this page
  • Objective
  • Introduction
  • Justice Srikrishna Committee On Personal Identification Information (PII)
  • Terms Used & Definitions
  • PGR
  • Trade License
  • Property Tax:
  • Water & Sewerage
  • OBPAS
  • Fire NOC
  • mCollect
  • HRMS
  • Finance

Was this helpful?

  1. Platform
  2. Data Protection & Privacy
  3. Guidelines

Data Security and Data Privacy

Objective

This document focuses on deciding whether Personal identification information collected in each rainmaker module is used for data security and privacy purposes.

Target Audience: This document is intended for Engineering (tech team), Product Management and Implementation team to agree on requirements for data privacy and data security.

Introduction

As a product provider to the government, we should be responsible for the data security of individuals and organizations who are using our products. The first step in data privacy and security is to identify personal identification information (PII) which will then decide our approach to data security. The personal identification information listed in this document is decided with the help of ‘WHITE PAPER OF THE COMMITTEE OF EXPERTS ON A DATA PROTECTION FRAMEWORK FOR INDIA’. The remarks and provisional views of the committee are given below:

Justice Srikrishna Committee On Personal Identification Information (PII)

All information about an individual is not personal data. As stated earlier, the protection of identity is central to informational privacy. So the information must be such that the individual is either identified or identifiable from such information. In statutes or instruments which use both these terms “identified or identifiable” such as the EU GDPR, it refers to states in which the data can exist. Data could be in a form where individuals stand identified or in other cases, it is possible that they could be identified. Whether an individual is identifiable or not is a question of context and circumstances. For instance, a car registration number, by itself, does not reveal the identity of a person. However, it is possible that with other information, an individual can be identified from this information.

Provisional views of the committee on Personal Data:

  1. It is data about/relating to an individual that may be the subject matter of protection under the law. Data in this context ought to include any kind of information including opinions or assessments irrespective of their accuracy.

  2. Data from which an individual is identified or identifiable/reasonably identifiable may be considered to be personal data. The identifiability can be direct or indirect.

  3. New technologies pose considerable challenges to this distinction based on identifiability. This standard may have to be backed up by codes of practice and guidance notes indicating the boundaries of personal information having regard to the state of technology.

On the basis of the above comments potential information from rainmaker modules i.e. PGR, PT and TL were identified and the storage of information in each module was analysed as below.

Terms Used & Definitions

  1. Primary PII: With the help of given information individual can be directly identified

  2. Secondary PII: With the help of given information an individual can not be identified directly but an individual can be identified if this information is available with one of primary PII.

  3. Independent PII: With the help of given information individual cannot be identified directly but this information can help the receiver to identify an individual through other means like search for property tax/ trade license or electricity connections

  4. Sensitive info: Password, Gender, Bank account number is sensitive information which needs to be protected

Module-wise data points required to secure are given below:

PGR

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Citizen

Name

Primary

Identified

User Service

Citizen

Mobile Number

Primary

Identified

User Service

Citizen

City

Secondary

Identifiable

User Service

Citizen

Password

Sensitive info

Sensitive info

User Service

Citizen

Street Name/ Locality

Secondary

Identifiable

Property Module

AO

Name

Primary

Identified

User Service

AO

Mobile Number

Primary

Identified

User Service

AO

City

Secondary

Identifiable

User Service

AO

Password

Sensitive info

Sensitive info

User Service

LME

Name

Primary

Identified

User Service

LME

Mobile Number

Primary

Identified

User Service

LME

City

Secondary

Identifiable

User Service

LME

Password

Sensitive info

Sensitive info

User Service

Admin

Name

Primary

Identified

User Service

Admin

Mobile Number

Primary

Identified

User Service

Admin

City

Secondary

Identifiable

User Service

Admin

Password

Sensitive info

Sensitive info

User Service

Trade License

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Trade Location Details

Property ID

Independent

Identifiable

Property Module

Trade Location Details

Electricity Connection No.

Independent

Identifiable

TL Module

Owner Information

Name

Primary

Identified

User Service

Owner Information

Mobile No.

Primary

Identified

User Service

Owner Information

Father/Husband's Name

Primary

Identified

User Service

Owner Information

Email

Primary

Identified

User Service

Owner Information

PAN No.

Independent

Identifiable

User Service

Owner Information

Correspondence Address

Primary

Identifiable

User Service

Owner Information

DOB

Secondary

Identifiable

User Service

Documents

Owner's ID Proof

Independent

Identified

Files store

Documents

Ownership Proof

Independent

Identified

Files store

Documents

Owner’s photo

Independent

Identified

Files store

Documents

Payer Information

Name

Primary

Identified

Collections

Payer Information

Mobile No.

Primary

Identified

Collections

Counter Employee

Name

Primary

Identified

User Service

Counter Employee

Mobile Number

Primary

Identified

User Service

Counter Employee

City

Secondary

Identifiable

User Service

Counter Employee

Password

Sensitive info

Sensitive info

User Service

Approver

Name

Primary

Identified

User Service

Approver

Mobile Number

Primary

Identified

User Service

Approver

City

Secondary

Identifiable

User Service

Approver

Password

Sensitive info

Sensitive info

User Service

Property Tax:

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Property Address

City

Secondary

Identifiable

Property Module

Property Address

House No

Secondary

Identifiable

Property Module

Property Address

Building Name

Secondary

Identifiable

Property Module

Property Address

Door No

Primary

Identifiable

Property Module

Property Address

Street Name Locality

Secondary

Identifiable

Property Module

Property Address

Pincode

Secondary

Identifiable

Property Module

Property Address

Existing Property ID

Independent

Identifiable

Property Module

Owner Information

Name

Primary

Identified

User Service

Owner Information

Gender

Sensitive info

Sensitive info

User Service

Owner Information

Mobile Number

Primary

Identified

User Service

Owner Information

Father/Husband’s Name

Primary

Identified

User Service

Owner Information

Relationship

Secondary

Identifiable

User Service

Owner Information

Special Category

Primary

Identifiable

User Service

Owner Information

ID of Document belonging to special category

Primary

Identified

User Service

Owner Information

Email ID

Primary

Identified

User Service

Owner Information

Correspondence Address

Secondary

Identifiable

User Service

Property Tax

Property unique ID

Independent

Identifiable

Property Module

Payer Information

Name

Primary

Identified

Collections

Payer Information

Mobile No.

Primary

Identified

Collections

Counter Employee

Name

Primary

Identified

User Service

Counter Employee

Mobile Number

Primary

Identified

User Service

Counter Employee

CIty

Secondary

Identifiable

User Service

Counter Employee

Password

Sensitive info

Sensitive info

User Service

Water & Sewerage

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Property Address

City

Secondary

Identifiable

Property Module

Property Address

House No

Secondary

Identifiable

Property Module

Property Address

Building Name

Secondary

Identifiable

Property Module

Property Address

Plot/House/Survey No

Secondary

Identifiable

Property Module

Property Address

Property ID

Independent

Identifiable

Property Module

Property Address

Street Name Locality

Secondary

Identifiable

Property Module

Property Address

Pincode

Secondary

Identifiable

Property Module

Owner Information

Name

Primary

Identified

User Service

Owner Information

Gender

Sensitive info

Sensitive info

User Service

Owner Information

Mobile Number

Primary

Identified

User Service

Owner Information

Guardian Information

Primary

Identified

User Service

Owner Information

Relationship

Secondary

Identifiable

User Service

Owner Information

Owner Category

Secondary

Identifiable

User Service

Owner Information

Correspondence Address

Primary

Identified

?

Owner Information

Email ID

Primary

Identified

User Service

Connection Details

Meter ID

Independent

Identifiable

W&S Module

Connection Details

Consumer Number (OId/New)

Independent

Identifiable

W&S Module

OBPAS

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Applicant info

Applicant name

Primary

Identified

User service

Applicant info

Applicant mobile number

Primary

Identified

User service

Owner Information

Name

Primary

Identified

User Service

Owner Information

Gender

Sensitive info

Sensitive info

User Service

Owner Information

Mobile Number

Primary

Identified

User Service

Owner Information

Father/Husband’s Name

Primary

Identified

User Service

Owner Information

Relationship

Secondary

Identifiable

User Service

Stakeholder registration

Name

Primary

Identified

User Service

Stakeholder registration

Gender

Sensitive info

Sensitive info

User Service

Stakeholder registration

DOB

Secondary

Identifiable

User Service

Stakeholder registration

Mobile Number

Primary

Identified

User Service

Stakeholder registration

Email ID

Primary

Identified

User Service

Stakeholder registration

PAN number

Independent

Identifiable

User Service

Stakeholder registration documents

ID Proof

Primary

Identified

File store

Stakeholder registration documents

Educational certificate

Primary

Identified

File store

Stakeholder registration documents

Experience certificate

Primary

Identified

File store

Stakeholder registration documents

Photograph

Independent

Identified

File store

Stakeholder registration documents

Income tax statement

Independent

Identified

File store

Stakeholder registration documents

License registration doc

Independent

Identified

File store

OBPS Application documents

Identity proof

Primary

Identified

File store

OBPS Application documents

Address proof

Primary

Identified

File store

OBPS Application documents

Land tax receipt

Primary

Identified

File store

OBPS Application documents

Property deed

Primary

Identified

File store

Fire NOC

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

mCollect

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Property Address

City

Secondary

Identifiable

Property Module

Property Address

House No

Secondary

Identifiable

Property Module

Property Address

Building Name

Secondary

Identifiable

Property Module

Property Address

Door No

Secondary

Identifiable

Property Module

Property Address

Street Name Locality/Mohalla

Secondary

Identifiable

Property Module

Property Address

Pincode

Secondary

Identifiable

Property Module

Property Address

Existing Property ID

Independent

Identifiable

Property Module

Owner Information

Name

Primary

Identified

User Service

Owner Information

Mobile Number

Primary

Identified

User Service

HRMS

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Employee Information

Name

Primary

Identified

User Service

Employee Information

Mobile Number

Primary

Identified

User Service

Employee Information

Gender

Sensitive info

Sensitive info

User Service

Employee Information

Guardian’s name

Primary

Identified

User Service

Employee Information

Relationship

Secondary

Identifiable

User Service

Employee Information

Date of Birth

Secondary

Identifiable

User Service

Employee Information

Email ID

Primary

Identified

User Service

Employee Information

Correspondence Address

Primary

Identified

User Service

Finance

Segment

Data Point

Primary or Secondary PII

Identified/ identifiable

Information stored in

Employee

Name

Primary

Identified

User Service

Employee

City

Secondary

Identifiable

User Service

Contractor

Code

Secondary

Identifiable

Contractor Master

Contractor

Name

Primary

Identified

Contractor Master

Contractor

Correspondence Address

Primary

Identified

Contractor Master

Contractor

Permanent Address

Primary

Identified

Contractor Master

Contractor

Contact Person

Primary

Identified

Contractor Master

Contractor

eMail

Primary

Identified

Contractor Master

Contractor

Mobile

Primary

Identified

Contractor Master

Contractor

GST/TIN No

Independent

Identifiable

Contractor Master

Contractor

Bank Account No

Secondary

Identifiable

Contractor Master

Contractor

PAN No

Independent

Identifiable

Contractor Master

Contractor

EPF No

Independent

Identifiable

Contractor Master

Contractor

ESI No kg

Independent

Identifiable

Contractor Master

Supplier

Code

Secondary

Identifiable

Supplier Master

Supplier

Name

Primary

Identified

Supplier Master

Supplier

Correspondence Address

Primary

Identified

Supplier Master

Supplier

Permanent Address

Primary

Identified

Supplier Master

Supplier

Contact Person

Primary

Identified

Supplier Master

Supplier

eMail

Primary

Identified

Supplier Master

Supplier

Mobile

Primary

Identified

Supplier Master

Supplier

GST/TIN No

Independent

Identifiable

Supplier Master

Supplier

Bank Account No

Independent

Identifiable

Supplier Master

Supplier

PAN No

Independent

Identifiable

Supplier Master

Supplier

EPF No

Independent

Identifiable

Supplier Master

Supplier

ESI No

Independent

Identifiable

Supplier Master

Decryption Service:

  1. Role-based decryption with the jurisdiction of employee

  2. Service-based decryption for citizens. Example: billing and collection service

Bulk Search in every Module:

  1. Search should not be enabled for citizen

  2. Bulk search in any module should not show more than 10 entries at a time

  3. PII should be masked in search results

  4. Employees can request to view PII in this case

    • The declaration should be made by the employee: about ethical use and

    • The entry should be audited with the Name and Mobile number of the employee

    • Notification about audit entry to the viewer

PreviousProgram Owner GuidelinesNextData Privacy Policy Templates

Last updated 1 year ago

Was this helpful?

🔐