This repository contains resources to support organizations’ use of the Privacy Framework. Resources include crosswalks, Profiles, guidelines, and tools. NIST encourages new contributions and feedback on these resources as part of the ongoing collaborative effort to improve implementation of the Privacy Framework.
Mapped elements represent where the DPDPA requires a control that would fall under the NIST Core subcategory or a control under the NIST Core subcategory would support activities under the DPDPA.
• To make it easier for readers, the DPDPA legislation has been broken down chapter wise. Sections and Subsections have been mapped against relevant sections of the NIST Privacy Framework V1.0 in the NIST Privacy V1.0 Core to DPDPA worksheet.
• Quick Reference worksheet has the DPDPA sections mapped to actual citation of the Digital Personal Data Protection Act (DPDPA), 2023 as well as mapping to the relevant sections of the EU GDPR to provide better context.
• Readers will also notice that many of the Privacy Framework’s subcategories do not map neatly to the DPDPA. The DPDPA is an “umbrella” legislation, as it sets out only a high-level framework for India’s new data protection regime, with supplementary rules expected in due course.
Mapped elements represent where the DPDPA requires a control that would fall under the NIST Core subcategory or a control under the NIST Core subcategory would support activities under the DPDPA. • To make it easier for readers, the DPDPA legislation has been broken down chapter wise. Sections and Subsections have been mapped against relevant sections of the NIST Privacy Framework V1.0 in the NIST Privacy V1.0 Core to DPDPA worksheet. • Quick Reference worksheet has the DPDPA sections mapped to actual citation of the Digital Personal Data Protection Act (DPDPA), 2023 as well as mapping to the relevant sections of the EU GDPR to provide better context. • Readers will also notice that many of the Privacy Framework’s subcategories do not map neatly to the DPDPA. The DPDPA is an “umbrella” legislation, as it sets out only a high-level framework for India’s new data protection regime, with supplementary rules expected in due course.