94. Digital Personal Data Protection Act (DPDP) – Data Security, Accountability & HR Carelessness

#HRhelpdesk #IndiaHRGuide #MandeepSingh, Who is actually responsible when employee data leaks, the IT team, the organisation, or the HR practitioner? And are everyday HR habits quietly creating serious DPDP compliance risks? In this episode, Mandeep Singh shifts the discussion from definitions and intent to the deepest and most operational layer of the Digital Personal Data Protection Act: data security and personal accountability. He introduces the idea of data nominations, drawing parallels with gratuity and insurance nominations, and explains why individuals should be encouraged to nominate people who can exercise data rights on their behalf in cases of death or incapacity. Personal data, he stresses, is an asset, like money, insurance, or intellectual property and deserves the same level of foresight and protection. The episode then addresses a common misconception: that data security is only the responsibility of technology teams. Mandeep explains that while systems and safeguards exist, responsibility ultimately sits with the data fiduciary and practically with HR practitioners who handle personal data every day. From locking computers and password‑protecting salary files to avoiding careless emails, printer leftovers, and unsecured scans, he shows how routine HR actions can create or prevent data breaches.He explains that negligence can expose organisations to severe penalties and personal accountability. The episode closes with a clear message: HR cannot use personal data for every purpose, only for employment purposes or with consent and what data is collected must match how it is used.