Vadodara is a petrochemicals and heavy engineering centre with a significant contractor economy and a growing IT services presence. Industrial businesses here usually discover that their largest personal data holding is workforce and contractor records rather than anything customer-facing.
Plant operations run on layered contracting, and each layer holds identity documents, medical fitness records, attendance and wage data. Establishing who is accountable for which records is the first task.
Medical and safety records collected for occupational health are particularly sensitive and are rarely inside a privacy programme's initial scope.
ProtectComply is built by Exuverse, whose team sits in Noida. We work with organisations across India — remotely for most of a programme, in person when discovery or a workshop genuinely needs it.
Yes. Medical fitness and health records identify individuals and are among the more sensitive categories an industrial employer holds, yet they are often outside the initial privacy scope.
Whoever determines the purpose and means of the processing. In layered contracting that is frequently the principal employer as well as the contractor, which is why it must be settled in writing.
Dinkar Singh — Dinkar covers privacy engineering at ProtectComply — discovery, consent propagation and the evidence trail behind them.
Take the free readiness check and find out in 10 minutes.
Start free readiness check →