Chief Risk Officer (CRO)
Enterprise privacy risk appetite, SDF classification criteria, supply chain risk and DPIA governance
Key Statutory Provisions
3 Enforced ProvisionsContinuous monitoring of the 6 statutory risk factors (volume, sensitivity, principal risk, sovereignty, electoral democracy, public order) triggering mandatory SDF designation and periodic DPIA execution.
Risk governance over external data processors, cross-border cloud infrastructure, vendor sub-contracting chains, and statutory exemption boundaries.
Aligning internal risk controls with the 7 statutory mitigation criteria considered by the Board during penalty adjudication (nature, gravity, duration, repetitive nature, and preventive actions).
Key Deliverables & Artifacts
4 Key DeliverablesRecommended Reading Sequence
Chapters essential for discharging this role's specific accountability under the DPDP Act and Rules.
Priority Action Checklists
Interactive self-audit checklists directly owned or reviewed by this role.