Telecom & ISPs
Liability Check
Telecom companies are almost certainly Significant Data Fiduciaries — processing call records, location data, and Aadhaar-linked KYC at national scale.
Why Telecom & ISPs is at Risk
Telecom providers process the most sensitive categories of data: Call Detail Records (CDRs), real-time location via cell towers, browsing history (for ISPs), and Aadhaar-linked KYC for SIM activation. The Central Government will almost certainly classify major telcos as Significant Data Fiduciaries, requiring a DPO based in India, periodic DPIAs, and independent data audits.
Common Violations
- 1.Monetizing call and browsing data for advertising without explicit subscriber consent.
- 2.Sharing subscriber data with third-party app developers or analytics firms.
- 3.Retaining CDRs and location data beyond the legally mandated period.
The Immediate Fix
Appoint a **DPO immediately**. Conduct a Data Protection Impact Assessment (DPIA). Review all data-sharing agreements with advertisers and analytics vendors.
Get DPDP Updates for Telecom & ISPs
We'll send you compliance alerts and deadline reminders specific to your area. No spam — unsubscribe anytime.
Need help checking your business?
- Start with the free self-check to find questions for your team.
- Our paid gap assessment takes four weeks. We check your apps, documents and records, then list what needs fixing.
- Fixing the agreed gaps takes two to three months. A final assessment checks the completed work.
Save your results and discuss the questions with your team.
Next step after the audit
The audit shows the gaps. Sanctum closes them. One programme covers legal position, data map, gap analysis, implementation, tooling, training, a written readiness opinion, and breach cover, under one accountable owner. See the all-in-one programme
What Should You Do Next?