CS Professional · Environmental, Social and Governance (ESG) - Principles and Practice · Data Governance
A proprietorship firm run by Mr. Iyer in Chennai provides professional accounting services and handles clients' sensitive personal data in its own computers. A board member of a listed client asks whether the 'body corporate' duty to protect data applies to such a firm. Which view matches the IT Act, 2000?
Yes. For section 43A of the IT Act, 2000, body corporate means any company and includes a firm, sole proprietorship or other association of individuals engaged in commercial or professional activities, so Mr. Iyer's proprietorship handling sensitive personal data is covered.
- AYes, body corporate includes a firm, sole proprietorship or other association engaged in commercial or professional activitiesCorrect
- BNo, body corporate means only a company registered under the Companies Act
- CNo, it applies only to intermediaries
- DYes, but only if the firm has more than one partner
Explanation
The Explanation to section 43A defines body corporate as any company and includes a firm, sole proprietorship or other association of individuals engaged in commercial or professional activities. So a sole proprietorship offering professional services is covered. The narrower views in the other options contradict this definition.
Did you get it right without looking?
One question tells you little. A timed set on Data Governance shows your real accuracy, how long you take and where you lose marks.
More Data Governance questions
- Nirmal Pharma Ltd's board is checking what 'reasonable security practices and procedures' means when no contract with its data providers spe…
- Kavach Net Services, an intermediary, intentionally refuses to extend facilities to an agency authorised under Section 69B(1). Which is the …
- Under the Digital Personal Data Protection Act, 2023, the Central Government is forming the Data Protection Board. Which composition require…
- Sunrise Retail Ltd, an Indian company, stores customers' sensitive personal data on its own servers. Its IT head skipped basic security proc…
- Meridian Pay Ltd's board notes that an agency has been authorised to monitor and collect traffic data under Section 69B, and separately that…
- Kaveri Fintech Pvt Ltd's data governance committee is drafting an encryption policy. A member says Section 84A exists mainly to punish compa…