Question · Central government: ministries and departments
What do the Second Schedule standards ask of a scheme?
Short answer: Seven practical standards, each needing evidence
Process lawfully and only for the scheme's purpose, collect only the data needed, keep it accurate, keep it only as long as needed or required by law, protect it with reasonable safeguards, give people a contact for questions and rights, and be accountable for meeting these standards.
What the law says
Rule 5 and the Second Schedule apply to State processing under Section 7(b).
Section 7: Some uses need no consent: data a person gave voluntarily for a specified purpose, duties under law, medical emergencies involving a threat to life, health services during an epidemic, safety during a disaster, and purposes of employment.
Section 8(5) · Rule 6: Protect personal data with reasonable security safeguards. Rule 6 lists the minimum: encryption, masking or tokenisation; access control; logs and monitoring; backups for continuity; keeping logs for at least one year; and security terms in contracts with processors.
Section 8(3): If personal data is used to make a decision about a person, or is shared with another Data Fiduciary, reasonable care must be taken that it is complete, accurate and consistent.
Steps
Field review: needed or not.
Accuracy: how errors are corrected.
Retention: which schedule applies.
Security: who can access.
Contact: published on the portal.
Accountability: a named officer.
Evidence to keep
Standards checklist per scheme
Correction process
Retention schedule
Common mistakes
Treating standards as a formality
No correction route
No named officer
From each seat
Data protection nodal officer: Keep one checklist per scheme.
IT head / NIC coordinator: Security and retention items need IT evidence.
Scheme or programme head: Fill in your scheme's checklist.
Internal audit and vigilance: Audit against the checklist.
What a good answer from management sounds like
“Each scheme has a one-page standards checklist with evidence, reviewed yearly.” Effort and time: Medium · per scheme.