DPDP Act, 2023 — implications for corporate compliance
Digital Personal Data Protection Act regulates processing of personal data. Requires consent, purpose limitation, breach notification, DPO for significant data fiduciaries.
Sign in to read the full answer
Create a free account — showcase questions, bookmarks, and progress tracking, at no cost.
Related questions
Ranked by topic overlap with this question.
What are the consequences of non-filing of annual returns (MGT-7) and financial statements (AOC-4)?
Additional fees, prosecution of directors under §92(5)/§137(3), disqualification of directors under §164(2), and possible strike-off by ROC.
Postal ballot — when is it mandatory and what is the procedure?
Used for transacting business not requiring a physical meeting (Rule 22). Companies dispatch notice with ballot, allow 30 days for voting, scrutiniser certifies results.
Annual ROC filings calendar for Indian companies
AGM by 30 Sept; AOC-4 within 30 days of AGM; MGT-7 within 60 days of AGM; DIR-3 KYC by 30 Sept; CSR-2 by 31 March; FLA to RBI by 15 July.
Board's Report — mandatory contents under Section 134(3)
Discloses extract of annual return, declarations, RPTs, loans/investments, conservation of energy, CSR, ID declarations, internal-financial-controls and material changes.
Disclosure obligations of a listed entity under LODR Regulation 30
Disclose material events/information to stock exchanges as soon as reasonably possible but not later than 30 minutes (Para A) or 24 hours / Schedule III timelines.