Navigating the CERT-In directions for business operations. Recommendations on compliance timelines for SMEs and additional suggestions for improving ease of complianceOn 28 April 2022, CERT-In released directions for cybersecurity incident reporting. With the compliance deadline of 28 June fast approaching, industry bodies shared their concerns with CERT-In and MoS Rajeev Chandrashekhar on 10 June 2022. more
|
Amendments to the IT Rules 2022 IT Rules Amendments - History, Concerns, and RecommendationsOn June 6, 2022, the Ministry of Electronics and Information Technology (MEITY) released the draft amendments to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (IT Rules, 2021) for public feedback. Privacy Mode organized a stakeholder meeting with representatives from SSMIs and industry bodies on July 1, 2022 to discuss key concerns regarding the dr… more
|
Role of OSS and new-gen tech in digital decision-making in fintech Role of OSS and New-Gen Tech in Digital Decision-Making in FintechNearly all major decision making tools that are currently used in business process automation and management are still proprietary and are offered from well established players. Lately, there is a new generation of companies in Fintech who place a lot more emphasis on exploring if open source technologies can take over this well established area where enterprise players are playing. more
|
Data Governance and semantics Human Colossus Foundation: Dynamic Data EconomyDynamic Data Economy v1.0 The Human Colossus Foundation recently announced the release of its Dynamic Data Economy (DDE) v1.0 architecture, which includes the Principles and a Trust Infrastructure Stack as well as a rollout plan for a related suite of components: more
|
Impact of India's Telecom Bill on startups, innovation and consumers Report: Impact of India's Telecom Bill on Startups, Innovation and ConsumersThe Draft Indian Telecommunication Bill, 2022 was released by the Department of Telecommunications in September 2022 for public feedback. The Bill is likely to have a significant impact on businesses and consumers if adopted in its current form, and to discuss these concerns, Rootconf organized a series of discussions. On 30th June 2023, stakeholders and civil society representatives came togethe… more
|
Data Privacy Conference Summary of session: Birds of Feather (BOF) discussion on investors' views of privacy and security; proactive measures and compliance for existing and future investeesDate of event: April 24, 2021 Moderators: Subhashish Bhadra (ONI), Anand V (Hasgeek) Discussants: Sharda Balaji (Novo Juris), Samuel Mani (Mani Chengappa Mathur), KK Mookhey (NII Consulting), Kailash Nadh (Zerodha) more
|
Privacy Best Practices Guide Best Practices Guide: GDPR Compliance at IntuitName of Organization: Intuit Domain: Financial Software Company more
|
Privacy Best Practices Guide Best Practices Guide: Masking Sensitive Data in Logs with LogstashName of Organization: Appsecco Domain: Computer & Network Security Company more
|
Privacy Best Practices Guide Best Practices Guide: AWS Security Best PracticeName of Organization: AWS Domain: IT Service Management Company more
|
Privacy Best Practices Guide Best Practices Guide: Data Governance StrategiesOrganization: A Software Company Talk by Atif Akhtar more
|
Privacy Best Practices Guide Best Practices Guide: Lean Data PracticesName of Organization: Mozilla Domain: Free Software Community more
|
Privacy Best Practices Guide Best Practices Guide: GDPR Compliance at ZeotapName of Organization: Zeotap Domain: Customer Data Platform more
|
Privacy Best Practices Guide Best Practices Guide: Unstructured Data and Agile Processes for Implementing Privacy ControlsOrganization Domain: Aviation Holding Company Talk by Toufiq Ali more
|
Privacy Best Practices Guide Best Practices Guide: Implementing Privacy by DesignOrganizations: Aviation Holding Company, Privacy Management Platform, Cybersecurity Company more
|
Privacy Best Practices Guide Best Practices Guide: Data Governance 101Name of Organization: LinkedIn Domain: Social Networking Platform more
|
Privacy Best Practices Guide Best Practices Guide: User Data Anonymization and Deletion at LinkedInName of Organization: LinkedIn Domain: Social/Networking/Platform more
|
Privacy Best Practices Guide Best Practices Guide: Guardrails for the Data EconomyName of Organization: Borneo Domain: Data Security Company more
|
Navigating the CERT-In directions for business operations. Report on Panel Discussion: Navigating the CERT-In Directives for Business OperationsRootconf and Privacy Mode recommend that stakeholders who are impacted by the CERT-In 2022 directions should directly engage CERT-In in public consultation, and rally for more transparent consultative processes in the future. more
|
Data Privacy Conference How to handle data deletion requests under privacy lawsOn 28 April, the Data Privacy Product and Engineering Conference held a Birds of Feather (BOF) session about handling data deletion requests from users under privacy laws, and how Indian companies service this request. The session was moderated by Venkata Pingali, co-founder at Scribble Data. Sreenath Kamath of Hotstar and Sheik Idris of Zeta participated in this session. more
|
Detecting anomalous network patterns Checklist for Network Security Monitoring (NSM) for On-premise, Data Centers and Cloud set-upsThis checklist was developed from the Birds of Feather (BOF) session on Tooling for NSM held on 15 June 2021 under the Anomalous Network Detection Patterns programme. Swapneel Patnekar - Founder at Sreshta IT - and Rashid Feroz - Security Engineer at CRED - shared their experiences and learnings. Anand Venkatnarayan, cybersecurity expert and editor of Privacy Mode and Rootconf progammes moderated… more
|
Privacy Best Practices Guide Best Practices Guide: Compliance Process for Change Management in FintechsSummary This guide is based on a conversation among members of the Rootconf community about the compliance process for change management in Fintech companies that had done one VAPT (Vulnerability Assessment & Penetration Testing) for security validation assessment pre launch. more
|
Data Governance Meetups How Zeotap became GDPR compliantSathish KS talks about how Zeotap complied with GDPR regulations in this session. Zeotap is a fully privacy compliant customer data platform that created a product to comply with these regulations. This was achieved by listing down all regulation requirements into product requirements, from which the product was built. more
Session type:: Full talk - 40 mins
|
Data Governance Meetups Birds of Feather (BOF) session: Implementing Privacy by Design - practical challenges and concernsToufiq Ali, Sameer Anja, Devangana Khokkar, and Satiya Prasath talk about common privacy challenges while using COTS (Commercial Off-The-Shelf) solutions. These challenges can be solved by carrying out data privacy impact assessments which involves cataloging all the data that will be exchanged with new partners and vendors, deciding upon and revising technical controls, and data minimization and… more
Session type:: Topic for Birds of Feather (BOF) session - 1 hour
|
Privacy Best Practices Guide Summary: Doing Data Security for Fintech - Challenges at ScaleThe panel discussion consisted of three speakers - Ashwath Kumar, Staff Security Engineer at Razorpay; AVS Prabhakar, Chief Risk and Compliance Officer at Zeta; and Ankur Bhargava, Head of Product Security at PhonePe. The moderator leading the panel was K.K Mookhey, the founder of Network Intelligence. more
|
Privacy Best Practices Guide Summary: Implementing Privacy By DesignThe participants on this panel discussion were: Kailash Nadh - CTO at Zerodha more
|
Impact of (draft) Telecom Bill on consumers and businesses Report: Impact of (draft) Telecom Bill on Consumers and BusinessesThe Draft Indian Telecommunication Bill, 2022 was released by the Department of Telecommunications in September 2022 for public feedback. The Bill is likely to have a significant impact on businesses and consumers if adopted in its current form, and to discuss these concerns, Rootconf organized a series of discussions. On 21st July 2023, stakeholders and civil society representatives came togethe… more
|
Signal in Bangalore Signal's Sustainability in an Environment of Mass SurveillanceOn 3rd October 2023, a public event was hosted in collaboration with the Signal Foundation, The Fifth Elephant and Bangalore International Centre (BIC). The event consisted of two sessions. The following is a summary for the first session, which was a talk by Meredith Whittaker, President of Signal Foundation, moderated by Kiran Jonnalagadda, co-founder of Hasgeek. more
|
Signal in Bangalore AI: Beyond the Hype CycleOn 3rd October 2023, a public event was hosted in collaboration with the Signal Foundation, The Fifth Elephant and Bangalore International Centre (BIC). The event consisted of two sessions. The following is a summary for the second session, which was a discussion between Meredith Whittaker (President of Signal Foundation), Udbhav Tiwari (Head of Global Product Policy at Mozilla), and Amba Kak (Ex… more
|
The Fifth Elephant 2024 Annual Conference (12th &13th July) AI and Risk Mitigation Strategies in Key Indian SectorsAbstract: As AI continues to revolutionize various sectors, it brings both unprecedented opportunities and significant risks. In India, sectors such as Agritech, Fintech, Edtech, public services, and Healthtech are rapidly adopting AI technologies. However, the lack of robust risk mitigation strategies can lead to unintended consequences, including data breaches, algorithmic biases, and systemic … more
Session type: Birds of Feather (BOF) session
|
Responsible AI Meeting Report: Introductory CallOn 28th June, 2024, the introductory call for the Responsible AI for Developers community was held. The purpose of this meeting was to discuss responsible AI concerns and considerations from the perspective of developers, policymakers, and other stakeholders. Participants discussed the importance of having clarity around policies, data usage, ethical considerations, and regulations, particularly … more
|
Responsible AI Meeting Report: July Round TableAI and Data Privacy Discussion Note: This discussion follows Chatham House Rules. All personal information has been anonymized. more
|