“Act”           

“Act” means the Information Technology Act, 2000 (21 of 2000);

“Automated means”

“Automated means” means any equipment capable of operating automatically in response to instructions given for the purpose of processing data.

“Biometrics”

“Biometrics” means the technologies that measure and analyse human body characteristics, such as ‘fingerprints’, ‘eye retinas and irises’, ‘voice patterns’, “facial patterns’, ‘hand measurements’ and ‘DNA’ for authentication purposes.

“Body corporate”

“Body corporate” means any company and includes a firm, sole proprietorship or other association of individuals engaged in commercial or professional activities.

“Child”

“Child” means a data provider below the age of eighteen years

“Cyber incidents”

“Cyber incidents” means any real or suspected adverse event in relation to cyber security that violates an explicitly or implicitly applicable security policy resulting in unauthorised access, denial of service or disruption, unauthorised use of a computer resource for processing or storage of information or changes to data, information without authorisation.

“Cyber security”

“cyber security” means protecting information, equipment, devices, computer, computer resource, communication device and information stored therein from unauthorised access, use, disclosure, disruption, modification or destruction.

“Data”

“Data” means a representation of information, knowledge, facts, concepts or instructions which are being prepared or have been prepared in a formalised manner, and is intended to be processed, is being processed or has been processed in a computer system or computer network, and may be in any form (including computer printouts magnetic or optical storage media, punched cards, punched tapes) or stored internally in the memory of the computer.

“Data provider”

“Data provider” means the natural person to whom the personal data relates to.

“Data protection & Security”

Anyone collecting personal & customer information must fairly & lawfully process it only for limited, specifically stated purposes and use the information accurately and in a way that is adequate, relevant and not excessive, and retain the information/records no longer than absolutely necessary, process the information in accordance with law and keep the information secure and never transfer the information outside the country without adequate protection.

“Password”

“Password” means a secret word or phrase or code or passphrase or secret key, or encryption or decryption keys that one uses to gain admittance or access to information.

“Personal information”

“Personal information” means any information that relates to a natural person (individual), which, either directly or indirectly, in combination with other information available or likely to be available with a body corporate, is capable of identifying such person, i.e., Name, Address, mobile Number, email id, Date of birth etc.,.

“Data processor”

“Data processor” means any person, including the State, a company, any juristic entity or any individual who processes personal data on behalf of a data fiduciary, but does not include an employee of the data fiduciary.

“Processing”

“Processing” in relation to personal data, means an operation or set of operations performed on personal data, and may include operations such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, use, alignment or combination, indexing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

“reasonable security practices and procedures”

“reasonable security practices and procedures” means security practices and procedures designed to protect such information from unauthorised access, damage, use, modification, disclosure or impairment, as may be specified in an agreement between the parties or as may be specified in any law for the time being in force and in the absence of such agreement or any law, such reasonable security practices and procedures, as may be prescribed by the Central Government in consultation with such professional bodies or associations as it may deem fit.

“Sensitive personal data or information”

Sensitive personal data or information of a person means such personal information which consists of information relating to; –

• password;

• financial information such as Bank account or credit card or debit card or other payment instrument details ;

• physical, physiological and mental health condition;

• sexual orientation;

• medical records and history;

• Biometric information;

• any detail relating to the above clauses as provided to body corporate for

• providing service; and

• any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise;

Provided that, any information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law for the time being in force shall not be regarded as sensitive personal data or information. 

“Third Party”

All external parties, i.e. contractors, interns, trainees, vendors, users etc., who have accessed to Urbango information assets or information systems.