How to Meet the Security Safeguards (Rule 6)
Failing to take reasonable security safeguards carries the highest penalty in the Act (up to ₹250 crore). Rule 6 lists the minimum. This guide turns each item into something a small team can switch on. This DPDPA 2023 course page explains how to meet the security in plain language.
'%2F%3E%3Ccircle%20cx%3D'650'%20cy%3D'15'%20r%3D'62'%20fill%3D'%2314b8a6'%20opacity%3D'.35'%2F%3E%3Ctext%20x%3D'28'%20y%3D'54'%20font-family%3D'Poppins%2CArial%2Csans-serif'%20font-size%3D'26'%20font-weight%3D'800'%20fill%3D'white'%3EDPDPA%202023%20COURSE%3C%2Ftext%3E%3C%2Fsvg%3E)
Advertisement
The layers (tap each) (how to meet the security)
Tap or click a step to see exactly what to do.
Checklist
0 of 14 done
Advertisement
How to do the common ones (how to meet the security)
| Control | Simple way for a small company | Evidence to save |
|---|---|---|
| Encryption | Use hosting with TLS; enable disk and database encryption in the cloud console; use full-disk encryption on laptops. | Screenshot of settings |
| Multi-factor login | Enable it in your email suite, cloud and admin panels. | Admin report of users with MFA |
| Access control | Create roles (admin, staff, read-only). Remove old accounts. | Access review sheet with date |
| Logging | Switch on audit logs; export or retain for 1 year. | Retention setting screenshot |
| Backups | Use the vendor backup service or scheduled snapshots; test a restore. | Restore test note |
| Staff awareness | 30-minute session and a one-page list of dos and donts. | Attendance record |
Common mistakes
- Everyone shares one admin login.
- Logs are kept only 30 days by default.
- Backups sit in the same account as the live data.
Related guides (how to meet the security)
Educational material, not legal advice. Based on the DPDP Act, 2023 and the DPDP Rules, 2025 (Gazette notification of 13 November 2025). Always check the official text on the MeitY website.
Official sources for how to meet the security: Digital Personal Data Protection Rules, 2025 (MeitY, PDF) and DPDP Rules 2025, English text (PDF). Always check the latest official notifications.